{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5166956b-947d-5c45-a22b-d819be85ab31", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2", "version": "5.2.10.RELEASE-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE", "type": "library", "group": "org.springframework", "version": "5.2.10.RELEASE" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:50dafba5-8bca-53bf-9cbe-2f0b50cbcfd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fe679171-5ffa-56b2-9253-719e62d0080d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:803ba0ea-981a-5e80-bf16-0ec6bafab729", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:73294bee-22ca-5671-86f6-32bf4c0c51db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3c724003-b92c-5c15-85d8-4ebb7682b7aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6f92f500-d939-5c6a-b1b4-0a92b6a12392", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c8d60ed6-28e4-5e79-a48b-4e655f862683", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ca51dc58-ef02-5fdf-a2db-cf3585844845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5f479b77-aca6-58a2-a6de-cc6bb89cd43f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d3465aa5-2d0e-57d9-962f-dabaea19cb77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6aa32a4a-a4fa-5068-a8c3-a842e1fe3a40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:62cb5746-aae3-52f7-9d38-2c9204c07a94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cd6df904-dcb4-5e42-912b-8308dcd87ef0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:13cce9bb-4e43-5583-a1ee-f059c910dc42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6552765c-83a9-5adc-b7ee-fa604d51a484", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:92256848-dec6-5690-ad3d-f206098a7de7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:93bf0d2c-f627-5bed-a05f-65e60425d9d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f583d583-0c2e-5a8c-935a-eb686ca73e95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8ee50330-c126-5e18-b47d-0f9b5f27f897", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5ec6ce5b-20b9-5a60-9a96-d4d400c84d5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dff9f50b-dcb8-5631-afd2-146638ffaeb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:07d815fe-d730-543d-8216-f3037a5a12bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a2a1c64c-755e-539b-b9b5-15ce64ab1e5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ce26fb97-4b40-5895-a51f-7f1b3342229a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:df6a7ed4-0aa4-570f-a1ff-eec37bdea8d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:44c27884-5321-5d97-982b-393aecfaa82e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f4d3a79a-31cf-5370-aa17-d42eddebbfb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5476b362-8b26-5a86-86c4-11ea1b5e8b97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e86c2bd3-6f66-5efd-8b1e-fdd4b398c4e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6df51b78-7d6e-55a7-b721-d4197aee899b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:17f4ab3b-ab1c-5f9c-bed8-a56a4fe4c3c5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7fe42e3a-2846-5df5-9562-84ec0998527d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:528f833a-14de-562a-8723-62973638c24c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0fcd30cf-5d25-5a2c-891d-04b5c9eb3d6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c0a0d2a4-0744-5c0c-89ed-285aa1cc3664", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a0196226-dab3-5218-bb85-fc90d80c560a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1293aa75-78e6-5ed4-8060-5562e885c7ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1d967670-95ea-524a-87cc-0f265c361ed4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5d99e370-1a5a-55ba-b39f-6f90012cbfbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e0a4d008-a9b9-5f08-b78d-ee1c7e0c31dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a0c41acb-3096-5c90-8666-2972bf03bff9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e5530083-1fcf-56be-a9aa-15fba0c4c819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:caf857b3-2aa0-5475-9dbc-e6465abe7024", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9ef9b1e4-9ece-5785-9b47-13ab3acc8f40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:45b2eac0-9601-56cf-9f9e-03ec48209928", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8ca1a81c-9af2-55e5-bd4a-3f98efcc66ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bf5e08f5-5fbd-5020-a884-1df4035d449f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3fb94e3d-549a-58b3-af04-00c86b86dcce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1d9b25b9-5e21-580b-a05f-3c1606d7188f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:53218c62-621f-5605-adb7-14066840ec9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6475425a-49d2-5b6a-901b-16472af347c8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer. Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-47890. The vulnerability concerns SSE (Server-Sent Events) view fragments, a feature introduced in Spring Framework 6.2.0+. Version 5.2.10.RELEASE predates this feature entirely - no Fragment class, FragmentsRendering, SseEventFormatter, or SSE fragment formatting code exists in this version. The affected code paths were never present in the 5.2.x release line.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:63560faa-5337-5f68-af41-687efd547f4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2b6fbf05-f17a-5ae9-9c2c-9676e517dcda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1c938fba-cbfe-5df5-b7d7-f551086db64e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2bb9621f-2f49-5f53-a36b-7be1d70ff3db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2b9df914-414f-5af3-824b-97331bbaa969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:555cac7b-b7c6-5022-a04c-00cfacf032e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c8a27bd2-5916-552b-9c4d-b742cace5d5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fc76c569-d135-5bf1-94f1-5b3e99058c2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.10.RELEASE-tuxcare.2" } ] }