{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5db2cfcb-46e3-523f-b216-7d395c030259", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bdf0954c-311b-5beb-9de2-199610411385", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:129ca1b8-ebc1-504e-baa1-c8d3f37f3789", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe7d514c-cbb2-5267-bdd0-968cdec518d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:144bdedf-2a27-54c5-866d-a833e4b7af6f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d00e44c-4780-599e-ab4b-99464c2bc569", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:07a416a6-4fb3-54cd-b062-cc851af3caee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16ced8d6-e638-5890-992f-623931bc08d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2ef66447-0bb3-50c3-b94d-16c912964f05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c55ded13-5a51-5829-abdc-73b56a5902e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3484cf25-5e89-56f6-83ff-7c792a06fdf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:68c1ce6f-d417-5937-957b-0a56b3d6e104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ee0820e-b981-59d8-bbea-66e10f79439f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:456247bf-df63-569c-9ade-43f4aa80bdcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5f5b831-9d3a-55c7-8b11-d2f41997d3ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:519f72b2-a08b-5554-a7ee-151ce3c2a8d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c532560b-69dc-5ebf-9f57-f4a86bcfc717", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa17d66c-c002-5487-b0e0-5cb979ac3020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f20ae296-b2ad-588a-98f7-8ccf8316c3c2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc853ca7-e788-5715-af38-c6a1928b6e88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b1f7904-a1de-5946-a6d0-a35235ad9ab7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54d4a57a-70e5-5a1e-872b-3d6096a68dc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5f3ac1e6-c858-520c-9b0d-47e72090d644", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8fb8149e-4c4c-5847-a759-1baf7df1d91c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14ebc8cd-b314-5dff-b889-05b7f1d0ba27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac5b829f-abcc-5346-9e36-0197c7979240", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:53904ab8-27aa-5bb1-8090-0609a8488851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b06747f-7fad-571d-94b7-aa8fcaf89e68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:15c47ddd-7f9c-524e-b478-85ffd871eb39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1aff9401-cf53-511e-915a-ecf85c373628", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5c15f398-cc81-54ff-81fc-462c5744ca20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2ed7d90-02f0-5eec-931b-ce7dcb9d724d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7fe3ba46-e5a6-57c3-a939-7819d919ce3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fdedc54b-e581-594a-b6c3-aed35c503b08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:93495b3d-5e6d-5ff2-97fe-9e1134ade962", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:74240114-aa76-5c0f-810d-bf4a35527895", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2802a575-5090-53b1-bd25-f077eed866f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6deb5e15-63f4-504e-b3ec-f50f434444bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:48cae206-79ce-5ffd-bf06-3d4548eac4de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e92d3ff9-1cad-5636-9756-9e2787062060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8f6a321a-0290-55b2-ae9e-c393a76b92b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d38aee7-6cef-599b-9285-6ba2947acfe4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51cd4f91-5d73-5d6c-8aa9-c761a6a9a771", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6b03d3e7-7ac7-5bc0-9030-a75a6d21c311", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fbe1e799-a41d-57d3-a7e5-627872f30252", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:32b66492-9308-5ce2-b14b-c231d24c6b88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8108d80c-7877-59c1-9aa6-e8eb2307d823", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d9905d2-2436-51f3-913b-6f7bb6487d94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad3c6d6d-31cf-529a-81c3-8f6d1743fb58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:92d80887-2da6-5979-a87c-7419d9930da0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85aee941-67c8-5352-a915-fe5e72ce453b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@4.3.27.RELEASE-tuxcare.1" } ] }