{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e14d80eb-a162-5b03-a7a0-0bca37552f7b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b5493bb9-9b0b-5080-870d-269005ec55ce", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dae05449-4cbb-5a65-9dc2-0b2251e0b7f6", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b2b61202-d694-54bf-bc9f-429a4d63ea89", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f81ff240-3b48-53c0-bd3b-dcef82c7bce2", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:046c55b4-7663-575a-b32e-23e6979f79eb", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d2bce84c-2b5e-5ea0-85ba-90c64acb8afd", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5a4ec5aa-5342-5609-894e-8bac9e6b0d2c", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:acdeeb49-34ea-50b8-a48e-3171908d8a20", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fd4f7508-c41d-5a5d-84ec-29aa8456b4df", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4a18f89c-ccb1-592f-b739-e4092199fb2f", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b8c819e1-b6bb-5491-a247-467673848ea0", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:23b93605-ec7c-526c-bba3-8d1438e351af", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5924e4f7-49fe-5460-aa1f-1e0a66a07edd", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6e9863f1-b4b8-5b2f-b96c-588a3fbff4b0", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f21794be-375a-5c73-bfc2-fec52c712613", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b6e9385-fe2f-589b-9f69-95f420c7f2e0", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context-indexer 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ca46e78b-9ed0-5fad-a98a-14848c3afe2f", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9e73bfbb-d57a-57bd-8e5c-aff109b2d1a7", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1c7162d0-e9bf-58ab-afb4-4691322c12ed", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1a546d2e-6e78-5b7f-8e5a-5acc7495c4a1", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0a979cea-167f-5183-b82a-3faa8c33ada7", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c9684ead-9d33-5b07-aec3-b9e3d6f3a37b", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9859176a-e8ea-5f1f-90f5-c81d511ca56e", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:370addb3-9d5f-5b7a-9154-9ddf7cb1d08c", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc1656c2-f311-598f-95af-1eaf6aa4fafa", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4ea15ffe-0a7d-5b11-ac67-27e9822060ec", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1f5c4e32-50b3-5f3d-a1f7-d877191508d1", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c30da1a4-1a44-573f-9828-a0b52e367c2d", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:64ede4a2-316d-5689-bdd3-2e26fbf8e9cd", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6900222c-1d3f-5ddb-bed7-766b5c232ad8", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a258ee3b-1016-596a-ae60-37855785c930", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eeb4c133-b1d1-5c66-a514-31c135f57d58", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6811555f-43a9-5378-90f6-faf8b18142c7", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb5bc675-2a56-5cf9-a4e4-97cc7fbfc6ce", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1db2e4fb-357a-50b2-af6c-7392487671b6", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc0207ef-79ef-57e8-a115-455a23b979df", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e1d066bc-cabc-5871-beb5-a96fec973151", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8c45d422-a3ba-5e48-b3a1-fee555cb9020", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:474eb188-dea6-53bc-bbe6-24e2c0765a96", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:05f7195c-e5e3-52d4-a678-4683a1cf1ddf", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7bb8280f-a198-549b-bac5-987123d9effc", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3ff2a012-dd05-5898-bcca-42d2bc4ece23", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:66125048-51d7-5735-95bc-505ed6f8fe70", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d3ef1c46-fe4d-5343-9dbf-4864fe85f3e5", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eecbf7dc-0096-5f56-9fea-d4f3e7ec9ca1", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:36deac3f-6795-566c-8b70-88b040d56692", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:81632742-d1c1-585b-a2b6-f489b707196c", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:20ee1d92-21d4-5007-86a9-3eb9e01b0fd0", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:57279b30-d0ed-5587-a6df-acba310c98c3", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0c776ac1-698f-58ac-82eb-172379de1a18", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:874f390e-b76a-517e-842e-d3ccd21f1f72", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f168cb1c-8686-524b-ba20-c47f1c45038c", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4fe5f216-90f1-54fa-9e94-d90f6c9b9785", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a60b5760-a3b6-5567-8b90-7f8ecaaf9cb6", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a012ebe7-a20b-578b-8613-87881a537dc7", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.4" } ] }