{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:187b6018-cc46-5761-8ba8-cecf10a60427", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:51858e99-9daa-5538-94a6-fc68297bf8a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:28aa6609-f034-5dc5-b8f5-765426c1b430", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cbb8c9d5-b490-5378-9c05-8194093fe8f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2f74aac1-4f99-5db8-b431-5823a95f9c6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:49e2f0a8-0f5d-57d0-bac3-5c12313a4a7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4ab90c8b-c137-5f43-99a8-3b625b78c28e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c12b4daa-f623-5ec0-87fb-66bbab64da3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9a7cac49-fb0b-5cb1-8332-e11fa67b7c99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e8717a56-43c5-5d46-9891-c299c51b0c92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:36071736-6c54-59eb-bfcd-f4480740eee8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:30670296-328b-53a1-8501-a15e2942cf30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6d73be20-eb65-5f20-8301-f1bdbebe4ad1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ffb71ab4-c448-5fa6-9637-186aedd7e92e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e04a4a4f-9b66-58f7-97bd-137dcac18dda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ba203dfb-98b8-5c61-9b55-6cf58e9fd56e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:848c22da-622e-5289-a0a8-07efbff4baaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a33d85a3-a40c-5cc6-bff9-de6d1dd6251e", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-web 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1bf40d3e-983c-55f7-9163-f22d9a1a3ce2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:899852dd-9bd0-552c-91fb-d6b5e03fb19c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6bdd5702-e386-5183-ae8c-75aae10c6e5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c4219d03-4573-553e-b6eb-b421858cd893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9da9f964-783b-5410-9d60-6d44b6549e4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8b7ed6cb-e142-5517-85e8-df72c4b3e259", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6c6e438d-0378-539c-8830-ea09653640cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e36fe1ad-aa64-5e84-87b5-d7dd13ac5ddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:99852977-ff0c-57f4-9496-79ab677e8af2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cefbe370-639f-57e7-a262-0124d75587c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:45ab0ac2-2b5f-5136-861a-a709cd80a3b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fead5e32-07e0-5940-8605-1e2d11e20efb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d8947c26-cafc-5fcf-91f9-19fecc3615c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e340a463-4ae7-5160-b8cd-bd8a955c4ace", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0f812627-4c8d-55f4-93ef-73e4dcc79d73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:66ce9d5e-1313-5e59-9b6d-4e720da5a851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1cec4afd-418a-533a-a10d-c3c2fb0c49e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c725deb2-6eeb-561c-b2c5-04d632498dfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1fbe6ba3-bf51-5abc-b3d4-a7e1bfa4a8e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1cc8a58b-3d0a-5ee1-89d8-d2788012cf7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:454e5881-8381-5df6-a169-8f8517645b33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6b999f30-6d0a-54d6-95a5-2fe994432e7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:37a9fa80-d490-508e-a167-d6a7c586d0ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:75d2ee57-ef82-5aca-839d-b32503b2b181", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5eff9c89-5d41-516b-a5ff-9f4000a78a9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:416e88a8-afde-54c1-ab0e-c02b92320eae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:565bd920-cba9-595a-bcfb-b82737f1f67d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2b17230c-bb1b-58e3-8751-d24cd676186a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:57ddeefe-6cd4-59b6-9d10-3e31490314ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:57c8cff3-eafd-5965-ae37-43e564db9db0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8eb6df2a-4a47-57ea-9b5d-873d135a1558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:30f273b8-fe59-5394-89de-b7afd5aed719", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c94c6db5-39e1-55c6-811c-69dd13ace884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dd2d9811-d7f1-58e5-815d-12079667df75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a3ab8e65-f69c-56b8-8e49-62441fa537ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9569d29b-f2ff-5499-9989-1dc584fb1b26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1093d547-b663-5d4e-af4d-ee5c3387b86e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:094248ee-3c69-540c-922f-e578843ee2ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a0650aa3-d032-5df7-8861-cb69a190ae5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:541c9c02-4fa9-54a2-ba94-e5c9be9fee84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f2f11ba3-1586-50cb-8d38-4c5880849c26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c0e94957-ea65-5791-98d3-5746c39e8908", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.1.5.RELEASE-tuxcare.5" } ] }