{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b977aab3-fcad-5496-a1f4-a69019411698", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6", "version": "5.1.20.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:09093c3f-30f5-555c-b4bc-2b2a1cc5da81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:250846df-e427-5ec6-9d29-2f71998417dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:be821b77-31b5-5685-8ff8-794ee683a59e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1c501a4e-d6d4-524f-a97e-58f3a94632ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e1cdd478-edad-5a1c-a091-26462256535c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a158df31-ed89-506a-ba39-05a725f95ea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fe85b869-e2cf-53dc-b34b-d91e0c5bf67a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:028e363e-e61c-5317-ba4a-a446de94ee8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:eae986d1-8d2f-5dab-b25e-7ae519175d9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b164ead3-b6be-50d2-880e-039b7dca3365", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:145cf7e6-6be4-51b9-8175-67135b983005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7d52a7b0-cc01-58ec-adb9-a3a7f6f34357", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:49b3acfe-f650-5878-97c1-3cc279fbc7bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:3ccb2354-f4ac-5c17-af80-c1a4208ced64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ca4107d0-61bc-5e13-8142-efeafa23d568", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e40946a9-6e15-5693-bfce-d083fb614574", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-web 5.1.20.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2e0cb376-0593-5bc0-912a-6a38aa647fec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7879b7ef-6a42-5bfa-8b1d-28abaaf0a226", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:826f3a5d-2ce2-5d61-ae6b-e0d83e16dc00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9a52ce3e-5330-5d55-8150-8dfbc77f1bc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ffcaa924-a8a8-5ba5-9a91-c41ea9fef938", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:105b2fc6-6034-56f3-ae4b-502293e4ea0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ee8029bf-1a47-5b73-aa77-2c3b54aec1c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a5117319-7dba-5f31-99c0-5bd4a827019b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:853ac9b7-818d-5300-906e-a6b30558b8e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8d108651-b370-5669-a66d-0427af679364", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2cf500a9-f9b4-59d1-bd01-993646704cbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6f119b7e-791e-57c9-8a62-568e74fb6943", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5d9f9b0e-b0e0-5136-a27b-dbb656b9854e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9f084815-65c8-5701-a9bf-1979a3137061", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5183e1f2-f20b-56ef-b06d-e943b39c54b3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library).", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:24022da4-5eb7-5fa0-8f0b-fff3c853cee9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:48810b74-e4fb-538e-9ca7-9eb813cc78b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c58c14f4-8186-589b-aab0-3988f7b28d51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:94e0a33c-21d9-57f5-96d6-44e1de8231b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b9662d81-9309-57a7-9b35-fdae102d5cb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6ea23284-b8d2-5bf9-b784-f503d0dbfebd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:30c2bc1e-e7c4-5448-972e-39288b921ed7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a6f26bb3-44ab-5492-a987-3b6a8f394bf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a435e4d7-b7b5-5c5b-82be-7f629cd01f6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:09d7e45c-761f-5213-967c-bc279ef8b3bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bfaba6d2-b8ac-5ced-9c82-c69043f6d667", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0aab77b5-a2cf-53c3-b09a-597c120bf7ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:a44ecd3c-66a6-56e6-8daf-7ef8033bdd18", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2f534bd2-4cb5-559a-8428-13a6bdd71778", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6f628b12-903d-55ce-a1b8-9956db49c38f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2537ed71-665c-5fdd-b258-d248f98bb9a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d6abca5d-246c-5a9a-9179-0447fd58d7ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e324817e-2aee-542c-bae4-4a80ca24b0a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:93f475dd-4a88-518d-913a-2c6f491d51db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b6298bcd-94b2-54fc-add5-ff458bfd0a9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ec1fa6dc-b31b-564e-a5bc-1cb96e028265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9f9d0d65-208c-54f0-abfe-5cdc6430ef02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cc05b0fe-3197-56fa-a3cd-c10245197748", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:06d337c5-b2f5-5d83-bbea-a435d2854f06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:db61b7a9-dbff-5930-b490-50ecdb05758b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.20.RELEASE-tuxcare.6" } ] }