{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3f5e44dc-50d5-58f5-bc76-f343a8929c28", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d769daf-2acf-55ef-a1a3-d1cc501e6cd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09585ccb-1cb9-5f8a-8992-f44ea3c0a914", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:597416e8-329d-597d-bb11-314713b5d700", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16d5148a-306a-5659-ab7f-9e42230f4ed8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f17d474a-7406-5020-8b52-3270d7f88fa5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3fd0c9fe-e80d-58a0-a4ef-1e7d844f8d94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9a1a5927-fdca-5583-9232-3d5c288f3ee2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c708c155-8282-560b-bf45-a0eff3919d7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35632a5f-092d-5543-97c4-e16bcbf7c659", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0818af00-f7ae-59a4-be1b-290fc4910841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:41664ca5-fc21-5486-ae65-0722b3d9ac9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:966b5b1a-d1e0-5dfb-bfa9-c6de27bfe1b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:833e0c9c-a734-594a-8cf1-3554e4a74cb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6d20405-9f2b-563a-8ef3-3a4f513e08f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f148505-cfb5-59fe-990e-6d91c1a3d54b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:06077f06-56f1-537a-a224-3acb2b0ca079", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b45ba3dc-1c21-5331-89c4-47aede209a09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:46263096-58ec-550d-b037-4b40d3d6bd84", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e28ea0f8-dcfc-58d5-a9f5-bdadd1dfe8c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8711e85f-14f9-566f-a59e-43aaf6a4d5b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b31cc451-0719-56a7-be99-d639a08f563e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a86d281d-b9cd-5ef1-b9d7-7f1c602ed673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cfe4c804-422e-5ab0-a048-3b9cdd14da41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:445190f8-8e6f-502c-b632-bf2a1a0d36e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee625fab-5558-5096-90c7-e8b890591c12", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1c581443-9513-5a36-9237-d078a1f3a6b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8e074935-548b-5cdc-9602-8dfa847ac3cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f62a65f2-71f2-5f74-a52b-4fbcc17be79a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b1fe518f-c977-52db-bcef-2b918a438b79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2ac1b0b5-8222-510c-90d2-a6c1e9c45cea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0f5fb52-4353-57b0-b0aa-683cb898a4d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c4fa9235-6ab2-56c8-9313-532f71501175", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb80ba31-8c8d-5ebe-a0b8-cc608f040110", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7f492057-37fb-5701-883d-dad818fbdd42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:306a1da5-bd24-5648-94b3-c6236998b959", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c2b076ba-c434-537b-ac10-fa4b0097228b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:072ddd2b-e01f-51da-81b7-042d452bb74c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cdafa077-2f8a-5282-8803-7cebff8b8bdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86f3d00c-1e2e-53a7-82f2-dffa99eb3e2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4737fa4f-1987-5922-92f3-79267d2e6bac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9a99941-b294-5a07-b43e-ef9d5bea4d2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:71c4075f-6902-5173-98ca-88963d448c67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c211dfe7-5454-5159-99b5-4e2e71f6e823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e3946099-1ecb-5c70-87c5-04178c3aedf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:04b029a6-2a99-5a96-bd2d-b3a231989bd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78be44c6-a553-537a-b271-bdd952657920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:26283381-8fb6-5d17-ae11-156497a48f98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b0a61e5-5948-596b-bc90-af8a13ab35e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:02bff074-154d-5284-8445-f17815b23cf3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a69ac159-094f-5b71-8f65-cc05c6869d66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.3.27.RELEASE-tuxcare.1" } ] }