{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:711d809e-5f1b-5899-8ff4-8c542dd55b59", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-framework-bom", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3745a129-ac00-54b1-9bb4-f682fb546030", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:585a30a7-26ee-5eae-aa58-faef0125a5fe", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:528af612-0443-54c3-a2b6-e1c02ab93577", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:63d4ca19-c8a6-5a11-b4ef-3a148a2d88c6", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b1330498-0b4f-5fe3-96a2-9de21f709519", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d0b6cd13-8623-5de8-8e11-24c175927e9e", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:01999902-decb-59c6-976f-330442485403", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:19f65404-c6fd-5518-96e1-cdb13f63123d", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:62b9c683-acae-50fa-a97a-fc49768f0ddd", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:82db301a-a232-5cba-95f6-f9bee7bfbdc6", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:59e0d90b-cabb-5220-85da-3ace399f75b6", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:52ff7055-632b-5903-82c9-9f691c62b3ad", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb27c43e-fa4e-5d7a-a772-3ca0f37b4f14", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:07ea8f03-35c9-502c-a9a7-eb49caff1ebd", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b2b43232-a523-54a9-ae38-040e47dea6db", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:06b3d9d2-f8a2-5e3c-9413-4a0c3f99d941", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-framework-bom 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ce8d4daf-6959-5fa6-9f1a-f5ade3dbd9b2", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:31bbe29b-4485-5704-b7f0-42d92d2eaca4", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e14d4f1b-1c3f-5182-93a6-e3d21f9a7d22", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c9eaf6c8-986c-5d67-bac4-ffc462d17224", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b8e3e626-2b13-5b30-9110-0468d7d22dae", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b5f9df75-5e8c-53f7-b098-5ae021175585", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d297f6e8-03c7-5b49-9c2d-2e247b0d6941", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eee85410-0c71-52cc-b2c0-ad86582cc6d2", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:21524f1b-17e2-50eb-b892-0c9c0c06184f", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0d55161a-b9be-5a7b-96f1-40f7827110a5", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:db2c5ea4-31d9-51c1-8a6a-810743206fb3", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:86415685-0eba-5a74-a33f-9ea4672145fb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5a3ee1c3-5148-549d-8aac-8979267e3d8c", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f5aa611c-bd85-5e26-a2cd-f356a50abc45", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ac3694a-6947-5dc5-8229-389bc986a6af", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b0573800-d118-5acb-a60b-d492a9afc432", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:afd2b9db-24fc-58b1-ae14-904222982837", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:131417c9-6280-5876-b915-5ec69b165411", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a0c2f6b5-b6fd-51d8-8d60-15052865fb0f", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:960d022b-e44f-5ca9-bc4a-5910b5d9bbbf", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1ce087e9-0c78-58fb-a162-5f15b6782e54", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ad68879-1ee6-56e2-9ea1-bb339fe105e0", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:adfa2bc9-a3f2-5bea-bccc-985e7524fd5d", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:28167747-da41-54dd-9ebb-005f3f0daac2", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:48154f74-4366-5596-8f46-c8467f7dfc4b", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4d76774a-7600-5da0-b894-8d4904e39fe7", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:88212e4d-b579-5056-bd7c-5541a3a97ef4", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bec9ad56-02c3-5b86-a814-040893c6702f", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b3d6fe7f-6ae8-50cc-8b21-d1b71ba64d4b", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aa773474-e868-5343-b565-b48795a8e4f6", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cb6684d7-1849-5cda-bc58-7b231346ad12", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9860776f-6b0f-50c0-8f7d-fa74ef58b115", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5cac821e-dd57-5c7b-8ead-dc0b3fadb735", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bc962529-f8b1-5983-aa66-26b601ac3dd7", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:adb69e81-7fdf-50e1-bc48-9b308bda2ab0", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4d4c488a-8bd2-507a-831c-59706a1d9cd0", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0776cf53-7bd2-5eb8-b43c-a5da90acc9f9", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc545b3f-a820-52c7-8d7a-90b8d420d21e", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:12b992fb-8e5b-5ff3-9abd-809e47a08ee1", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.1.20.RELEASE-tuxcare.4" } ] }