{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fa7194e5-a762-5d27-8bd4-c2368420b4ee", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dcb2dc5e-8cf2-5a1c-aa5d-2b015aa44022", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6c43cae6-f2ab-542e-9977-fbac05bc03d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:13a9e195-e1b2-58b9-ae44-8ea30fa74002", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:67511ad6-6730-5f9f-838f-627a3cc90f0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7eeb3e51-24cc-5fb6-83da-d9c28eaf956e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fece5dd7-d491-5376-bb9c-1654835dd4fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2c1da77a-64ab-53d8-8d02-058dcf501e06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ad09b2c9-513f-541e-b9d5-9957d8b114fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1cc11564-e17e-52f3-b3b0-3accfaee4958", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2bac5980-9266-55c6-86e7-385a49e906b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5220124b-5a70-5ccb-b232-e86ea76d5da3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:73a2dd7e-87f8-59fb-8afd-311040d529df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9b397eff-e363-580b-939e-6835941fb27c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:60d16260-3dee-540c-bb72-3a68cf66db80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8e53553f-7dc5-522e-9191-106ea83ca20e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:93564054-2ac4-5ba1-9d6e-e4a8f0449212", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f476a668-8277-5135-af2d-8ffc0319b748", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-tx 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1ecb4538-aaf6-5b80-87dc-e43c19957d08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:07af7b90-e2ff-5376-8723-1c897935b6ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c28bead6-6328-5439-be99-72f69121217f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bde24570-6f75-5575-8bba-729d2863bc7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:84ac3911-6a6d-5565-957e-e47b384714eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2b5b8af3-ff21-572b-929f-47d110a6b751", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:988be2f4-838e-5b08-8a56-a13e00b77d92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5f73d2c3-c78e-58f8-b068-0145eaf68b16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:687fe8ac-d605-5162-8ce4-e7ad0a2b975a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:aa023626-465f-5f4b-a3fb-5e5628416131", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:132a203c-5b80-5d8c-834b-6b1d25f79e6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6965b5bc-56e3-543a-8ac0-a9b5c968287e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:52714375-bee0-5fa5-82da-082975a13476", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:20b48bbf-8941-5172-8d65-165be0eaebed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3e8ae314-6c74-5be6-ae8b-b699cf48123f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d1e52337-6e54-5a8c-ab74-71e3a7018939", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:18283140-2752-599c-9ba4-a75b88eceb5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:defbb38e-2db2-5d06-918c-121716ef0c7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f51f202b-1431-536a-9ab9-c6023111f110", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fe18d31b-e0b8-529e-84ea-a846e2e7403b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c0621df2-d035-5356-a31e-429b12c714ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4388b9fd-e51e-539e-bd43-74c33c302acd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:91566471-d3c1-5872-87d0-e567d3f03b3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:373e43f3-861c-5f55-bc80-3bd570a3165a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1cb3ed41-bbda-5166-ac66-8adbb93ab0df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e1fe2783-e5a4-51a4-bfb5-bfab2d26bdf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:94612999-b257-5c33-b88b-d873ed2310b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ea85dbcf-ea45-50b8-9089-0322c1a75961", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a1ffa71f-a5e5-5e90-a355-e4bd36a755d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:91f06656-120e-539e-8cd2-9159299f1eea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2bfc7211-57c6-590f-841d-cd814e6d4bb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1129410e-5b87-5fd6-a693-baff5962fc60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cfa7817b-5c17-5e56-b738-fd3e1e79d1dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1f28b708-03b2-546c-a44b-6d0005dd39c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5a88b167-33e8-5303-86a7-aab33af2d860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e1937762-ba05-5d4a-b122-50cf35df19f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7da7ff90-b395-5e70-bc80-6cb60665aff4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:36a9cd30-7a09-5cb5-afa7-6fafd082619c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3b8fe1b1-335a-5984-a175-305f0029a00f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0320c05b-67e5-57b0-86fc-12a789ac2393", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8b6f64b5-e958-568c-adcf-b641d3b9cbfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0e66dadd-b338-5abc-b142-284621a18a9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.5.RELEASE-tuxcare.5" } ] }