{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c46a7f0a-0a25-5d04-8f8e-3085e959f779", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-instrument", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c7f85ed6-8a68-5adf-a649-e5ef4ab47beb", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:763342da-b64a-59e3-aa90-e1800eb014b8", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cee7387e-fc86-527e-a5a3-3c0133dba48f", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7c22fcdf-aca9-5131-a7ed-b4896b5842f8", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0037b3cd-bc2b-565e-a86d-8b0c5a920808", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b7a41ada-91ec-526f-8a21-e58377692625", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e51e1f47-e2ef-5adc-98a0-e2c75f4be951", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:345dc2c8-bb12-5a1f-ac0e-152ac242d655", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0361ace3-c316-5593-bf5c-c1d34778b698", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9d0e07c2-c621-5127-a2e2-477e0a4eb04b", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d82792c6-0b9b-5715-99f7-d40a221bc341", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e7390820-d8c3-5ce6-980d-8e4620ac3c93", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d3fa5840-1cd1-5a4a-8b76-622e2e1ba740", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dae0309a-10af-5bc5-8dc3-1fe373d10bd7", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8491617e-c73e-53e7-857a-6ff9643c2c70", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1235cebd-91ac-5d1c-9075-23dbd0f205be", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-instrument 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8999fd95-9808-5562-89b6-85c520b2e3de", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1d0da314-cb8f-5b34-b2e2-dc3832590795", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dbe5365d-5ff2-582a-ac52-caf53be1aa59", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:df94597a-df3d-57ce-b5a9-d2b3d70da728", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8d032ec5-843f-5751-ae71-42bbb0e8c334", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a9493e03-bb58-53b2-ac18-bfb85c499776", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:86e1fe27-bb56-578b-9c23-af4789b39afa", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:80e775ac-bc10-58d7-bab0-f66d1124e7f3", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:84c47b07-3943-5234-95eb-63f3e334b6ff", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dcaf730f-482e-5762-99bc-0c1c8e43a6d9", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9dd52ed8-8e42-5032-8a90-e65a7d1ab83e", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fa8d3016-a73e-5869-8932-d041e6ec76e4", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18571650-0c62-505d-a232-4f08a451d920", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0fdc15ed-eb0f-59b8-bb33-88c7dbbbdbb2", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cd91920d-215f-5902-ac64-1935b5c84f45", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2e8d7e9b-2c4c-51be-a7f2-7b5811f30602", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:03cd8add-d47e-58b0-82c8-18db5e945ec2", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8a12b169-718d-54c5-be8f-dec79635ae9d", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5782ef02-c3b3-534c-af18-d2e30cb85623", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:141ef7e9-130d-5cf8-aa5b-ed24a078b043", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:01914e26-24b8-5be5-83d5-1871062d796d", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4675e95a-9d46-569d-a264-9cf151d251ca", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f31a8cca-a55c-5b6c-be6e-b086afd888ab", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b1bd051e-10a6-567f-9758-ff454fa41492", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d7175cc5-045e-5b22-af25-759503679658", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:095e7e34-24cf-537e-a800-73407fa2bdad", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1cfcf94f-4c17-5c46-a532-d798538f9480", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2eeb7bd4-05ae-573c-83a4-525599a8c493", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b3fa2578-3957-593d-b72e-55249623a259", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:44d2c699-e1d3-53bc-9379-a84b97d861b2", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:604d12ee-a5ae-5a22-85c3-6c3f7a2578a9", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8eda20c7-d598-5397-a59c-f1b25b77e849", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:90a7285b-f922-5878-b227-2345a10cff7a", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4491029d-b2ac-542b-bd54-47f6e97d2f5c", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe019977-4758-50c8-88d3-a874d9df9cb7", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0d75ec65-e440-5100-b0d8-628c7df5a9c8", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b75035b8-bdf4-5db3-a2e2-83f5fa99b54e", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:49c4dc75-0929-5914-8f18-bb8eb6cc24c9", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7880b820-b19b-5594-ba14-29bffc480bee", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@5.1.20.RELEASE-tuxcare.4" } ] }