{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fc74a4f3-c4e4-5a01-bc29-7d82b8717732", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-context", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:47ac4ca1-0c70-5760-a4d2-b61ce45b99ab", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f7741c85-4735-55ea-af6a-6c1705e50774", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c3095f41-fee0-5246-8de7-f6a8fe816737", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c67771fa-fdb2-5d9d-b8b1-d993968971a2", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de8acf21-43a5-5821-bb9e-a46f1fef9d67", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5d7ef72f-88b3-5858-8c94-ceabb0cf0bc3", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6281787b-01f8-5fae-b32a-42481558f07a", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aa59dd13-671f-5c4e-843e-4a7bdd8fed98", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f7edbe16-7fae-5978-9c9d-1a9f63899366", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:29b8d4df-91bc-58d6-96de-68b0eac92f52", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cd2cbd15-c277-50a7-bb7d-c22be4388f53", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ba9e4d9c-f903-51c7-bf74-0703ca775aca", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:82d5fcfd-047b-5ef0-b7ac-33667ca6c38c", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4b2c9103-156d-50a6-80af-1e2a877ab047", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c52263eb-64bf-5084-a7ae-f71d23550f1d", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:15ae4571-d943-5df3-86dc-19896bdad153", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e44d9813-c217-56ad-bd5c-f906eec26725", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2a9f0737-076e-590c-b746-c5cb5f55988c", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:799bf239-3567-5c4c-9e9f-dd9909082e27", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9724396f-ba64-5c49-8962-23f305929f1b", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ed778e36-ef17-59f4-acb4-eeb4c9cc5881", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:06602b3c-a4ed-53fa-8205-71bbec8f610c", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:96109700-814b-51fc-b60b-4ef32a038c1c", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4dc25573-b91b-5153-bcec-a4456c9582c0", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e01024c8-3e86-5c87-b7d3-8a585833f2f9", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fdc0e6eb-73cc-54d0-b685-40373c2debb1", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6ec2a2a5-5ff5-5840-9819-495fabd98c18", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ea915294-0ee7-557e-96c8-8a544f6440c8", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:36bf90ad-7fbe-55a3-a08c-906b16077c7c", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d3c5ad8f-a4f8-5235-a49e-ade53b82fba8", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c15c3e1-f637-5d3a-b44a-3a7ca73e0695", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:66c1de2e-a392-5069-a391-ac3e28534601", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:07a024b7-5c65-51fc-ab20-d16511b6ea1f", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bc8d9c1a-3426-5716-a510-a6b51d5810dc", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de521b69-fdd3-5ea3-899a-44cab3d0852a", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:812d0c3c-0cb0-58ff-b1d3-1c97ce88e38d", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f1e078bb-83a0-5222-aff6-623cb5e9a369", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8d869708-964f-55c0-8692-7681d068ce98", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b70e70dd-89c8-5fae-92d1-fbdb4c7d4142", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:12aaf502-bb78-5290-a179-149cfb57ef87", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3cdaea81-d96e-5d34-9d10-1b823852841c", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4e7fa748-3f61-5c94-ab0d-76efa1868840", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0c65a3c8-8d6a-5794-bbe5-702c31f58965", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:60b92c1b-1f2c-57f9-9ed6-1d8a10706fb7", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6e91673c-cc67-53b8-bb45-7624f5ff9555", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:90c2e5ec-8f0f-5e5f-bbcb-9603a9893079", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:64505b78-29b0-5b78-bcfc-66d8bac4dd4e", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f1e2aaf1-9684-5e60-9ae5-aa01a728c3e9", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4e2caf46-7839-5ed4-bdec-89d1d5881055", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b70b4b81-cf5c-51d3-92df-bd6c492d4758", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:08335b3e-f0a2-5518-a6c0-a977fb60c9e6", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:95922015-2b09-576b-8c12-12552e332fd5", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:54d2a6d0-75e4-5ce7-85c1-9054ebdf4c45", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4d8e705a-cf98-5a27-988e-8f848aae6f06", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6005aa8b-1ae6-54ca-bc0f-073ee9a95edd", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.20.RELEASE-tuxcare.4" } ] }