{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3978ee7d-0010-5b59-9f46-d6013439ca0b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:76f2ee24-ce56-580a-b0c5-da9d0518f75d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a418db14-e8f9-5723-8a86-d5d12804834c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:306f865d-0fa7-53df-be19-f859bf3717e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:397418a5-f12a-5b3b-955b-d57e544be576", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f3bde80c-4b77-5f89-8754-7c1423a2356d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:715dea47-b6f3-5c67-9786-f01f0739bce1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a7fdab9d-a5ef-5cce-a30d-88bcc6d81953", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8869dce5-ff3f-5398-a1e4-28e139f44806", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:88125ac8-11ed-59a5-9a16-20505115bcdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e73e23ca-8e4e-52da-bfc6-ecb43436f717", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1cca8073-049c-57b9-bb56-9217446257d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d84cc1f5-5fa9-50f2-894c-657dace47dc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1551b23a-eca2-5df1-833e-440fe6b6ee20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6e0e4356-ceac-5298-808c-5d5eccf3c5d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ebda0cee-3886-54ca-a647-48716da9c994", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dec492c2-db44-598e-a18c-f3398f5707b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dcbfebca-dcf4-5cbc-a30b-4c4d3783fd32", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-oxm 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4f581c09-165f-571f-8808-8dc655dcc1ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b2184cc4-7590-513c-96a9-f84d4c375069", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5b6eac86-e4eb-5b46-8406-689992a82421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b1ae5ec1-3133-5781-aa87-eb175ce9ab87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:135831a2-36d8-53ba-8dcf-73a9dd5a1578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:800d0984-1ca8-546e-8cc7-39d2739e84e8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dff697ba-7351-52d4-808f-304026e9ed1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c68adfe7-0c78-5963-8aaf-d8ecf0f73bf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:380e89e2-1c24-5b87-be89-9abaddb017ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d81d6a95-ef2a-540d-b236-7691be04167a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c97956cc-a3f5-57d5-9247-67c1a27ab2dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bca7b02f-251f-529d-a2d9-045c83d2a966", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9cfa27a9-dca7-5f04-b8a1-d3180e09fe70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:457c73c4-7a06-5a39-b3ac-91fd7e8cd658", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4e4119fa-3410-522c-ac50-1bfbb46b35c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e4f80bc9-def9-5b52-ba52-58834ca9d0ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:150ad53a-f174-521d-b642-6714a2d3af47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c9154fc2-214e-527b-bc16-dc3f634051b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ef5e848c-2d2d-502f-80d7-4bf6b490a4f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:46b8cb39-20a2-5c08-b7e9-b3cd0d0e2e63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4592f553-a58e-58a5-8625-9e7465c7e8fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:85f8ca14-23a8-5f2c-86ed-f2bf2d0f7696", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1f588117-493a-5393-b79e-ced276ccbce9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:12177656-6cad-5f15-a6cd-a7e9d6015792", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9d6e33c4-03b6-55b2-9152-e0bb238a6c82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:150e23f8-5394-5b2b-b427-7e7e08c80163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:42343a66-174d-52fd-b333-b7e133288ca8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:921f4a31-a66b-55fc-8791-ecebff6fa66d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dfffbccf-922b-5b41-aef1-4592ce4f1c53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:21cd1bf8-dcb6-5459-a0e3-b762e942c210", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8c5a0ada-9c26-5162-90c2-6b5ce49339c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dda461bd-abb7-5ff1-a852-fdf16aea1747", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3b34f5e1-21b5-57c2-801c-f394e6cac69c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b5953682-c9ee-5b85-9e1f-7e449b6467be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:31fe30fc-5cc6-55f9-b960-49cc9550ec96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9c7d561c-614b-50fb-a9c2-d6c4f3cdaed9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8fbcb496-d57e-552f-9259-9f4d31c5d16c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bd43786f-3e88-53b6-ad82-01d515577a94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6f6107d9-e231-5a60-97c5-3b8113bef571", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e6affd12-add8-5801-858f-25c9da998101", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8c1a9ad2-c9d9-565f-be56-edc9421c1c9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:17193e50-09a6-5847-93e4-30e6dd42024a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.5" } ] }