{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:37471165-f3e0-5b4a-84e7-9f96252b7951", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6005c2a7-cd94-5f9d-ba99-cd9634ecb325", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47308142-f13b-5a5e-bffa-71447092ef8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d21c1b03-c70f-58a9-9855-9fb6a7c09c32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3fd1d81f-1cf2-5677-9379-c566fc21de4c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0c39bd4a-072c-5093-a1a8-2805843c2c91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:58c6f08b-cd01-5e1b-9c72-0b894a680a33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b96e00f3-6452-5304-a864-075b1405eaf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f2e4e2b-1aec-5d34-9c96-28a9e026f003", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:660ddcca-a15b-562c-8a06-6a71a9cefaa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:59c64468-ceab-51c3-85f2-64bdfeb37d3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9ec97963-63f8-5f10-b6bb-dd08d1dd1508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:169a3e6d-9b72-5337-9686-7ab9b71f7601", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:15bde4cb-f9a6-552c-a7bc-11f52cb6be0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:27cbda36-ebc1-540c-beb7-f7fdea1e0256", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af8e7f85-46e3-5c69-910a-4071b2d3b972", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f73faa08-9ac8-5cdc-b774-7d5923d91ca7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:08e39f67-040b-5be2-ab8d-e31828162be4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b364829-a9a4-506c-8d94-2a5bbd9b393f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7185a957-74b6-5db9-a804-e92caa4f8971", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8fd54cfc-7dce-56e6-a9e0-8816d79fb00c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a7f66de3-f59b-57a6-9b7a-9b64ce876493", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3554141-bfe9-5d01-8414-5d7142e1d0be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f1d0ce18-715d-5152-ad94-48f6b0f5d479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cdd3531f-9b6c-5fa0-94f6-ba781c854231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b14c9111-6a88-557c-b4d2-9b25e815ba5b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:61e39cfe-7c42-5ed9-8ddb-e3928a706917", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb28b7cf-44de-59ac-a717-86270f2a91b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d727b110-4949-51a9-909b-c42d1c7f052f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cfc3aa72-2693-5aaf-b229-5e03e3601b01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e77a2ec5-12fb-5d31-a90a-854bc83471cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b3a1eea7-2258-57c3-a79f-189b2ffb77ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69acd3b7-80d2-51ca-ae62-b6bc695c6c54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0244b9ee-c5e3-5513-b7a3-9cef5b44863d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:57cb6f72-bd9c-5b6a-b8bb-8e2fb53cc580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3fbdeec2-8593-50ee-b73e-7abce589ab4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e11e9a1-6278-54ff-9052-ac1e7bf28ebd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd5064cc-010f-5842-9df0-9c677a6b8664", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb3259b0-6743-560d-91a5-e067c6d867be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6a27b673-0096-5e52-a0ec-7efcff29b378", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d262cbe7-554c-58c6-b45d-4965b9d1c835", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d2f6ba6-43b7-5396-b1f5-bb5e681a0084", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88f7b745-0fbe-558e-94e4-6fef86ec4946", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:791a63bb-0f74-5604-9d67-37b376f0b439", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8be2efac-aa10-5bc6-bd68-370a86a443ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60c234d0-c6df-5c3d-9b1b-c3ff620782ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:41928de6-3062-5d6d-84dc-6e13280a5764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d82732d3-dfad-50dd-968d-de146d6a5491", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:44cc4e8c-d456-5246-9b20-d4311c1f72b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8595d35-a8a4-5be4-bffc-81c13916e161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2b7457e-b687-5e82-98fb-c9e05a47fdcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@4.3.27.RELEASE-tuxcare.1" } ] }