{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ea4f149e-945f-5eb0-a598-99ee15f0e0b8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:41f211d4-177a-5bc2-89e2-2158bf031eaa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a7a4e4b-2a02-5c8a-904a-9909bbe4284f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88055a4d-f297-54ea-ac2b-37b9e09dea03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:59af0d14-548a-5745-9907-cfbf61bbf5cd", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0d20215-9b02-5eba-b8f5-e3a753aa08ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bfffe762-a124-53c3-a6fe-be893818fb89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64d28072-3a4d-5016-9191-442a645b6148", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f7545eb5-3e62-53bb-8d87-f74444a69697", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:42fbf789-31bf-5558-943b-2687452d4ef7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3965e988-3296-5f85-97fa-c1328715c009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff644e0b-a0ce-50e2-b2d9-970878292a7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f02bcf5-c1c7-5cd6-a0c9-3fe6886fc14b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb9fb45f-4841-5459-bac7-8fd893051a69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:39f89190-c3b2-5b28-923f-6ede0a70e3bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f7564d9-3c3b-5b34-b3f6-cfb3981ae053", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f014459b-76c0-5876-a710-912b08f97daf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9a85e0b-2168-517d-817f-ea4771054bcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0e34d215-38e3-5e7f-954e-e999aaadb9e5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11aae67d-315d-5da7-bf69-0d297c63a529", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23d42683-bc19-5b44-b523-74018f4ec509", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1169944e-fd37-5a17-8a66-2358b3dccc29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51161528-ef70-5d44-89ff-0c67f0a4f14c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:22d51362-5308-5930-b014-88967eb4e86b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b54749d-13f8-5622-96be-de9674a6acf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:66090558-0224-5f67-aa36-1dccb8a5bd90", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aba6097f-409e-52e2-b501-c862c4072c4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:900ffe38-4456-5122-b61a-db5b3f68b47f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:468c0ab7-9da4-5c76-beed-d53bd690c992", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cef4d485-51de-5bd1-8cf7-7b37e6146bc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d8f08fbf-c5e7-5abc-9a31-d6c6d6b4b1df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:beba9be5-ce7b-55a4-937b-f0eb6f2016f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9ef0ce09-5478-5851-916a-a89be1f0c94a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1b1f21e3-3ded-543d-9bb6-4f4270a012e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4dc06ff1-b294-532a-a968-c70487b34fa5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d1a3b5b-fe66-5d34-ad39-945b8acb2c1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8063dcfb-a1e7-5bf9-89be-92d04080394c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:912c717c-69f5-529c-91df-2ae1469ad3e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a67ab192-73a8-5c82-8531-89792e7c84c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:61a549df-ef8c-53a1-a9ff-65394151a40b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:73b2d3f5-8829-5dc4-beb8-73e63ba1c10f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cfe32ba0-e7a8-5ab5-b240-69dd90ec1b25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e159383e-33c2-5b00-9c65-c06f1fd92f21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a9b4739c-07a2-5d04-bfe6-a3f064cf2d49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf61418b-5dac-57a7-87d6-61e61880660d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2ea27fd3-b2df-5df9-ac67-349a86284496", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0d71340-16b5-5b01-83fc-a57cf03b4d2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc28ed8f-d0cc-5c00-b465-bc11e9ddb1e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2c0501a-3088-52ea-9b6b-ea2ed5c72598", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f3c71290-eb42-50fd-a140-8a7db58858aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf10134b-1ed9-5db7-acb4-7db63c885135", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@4.3.27.RELEASE-tuxcare.1" } ] }