{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a2732f00-f946-5af9-9bab-f4419f386417", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2", "version": "5.3.13-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.3.13", "type": "library", "group": "org.springframework", "version": "5.3.13" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:01004d2a-eb17-5b07-b825-a4dad620e24c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:cbb4ff98-04bb-5146-9882-7ec2d390030d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:036fed87-66c8-58e3-ba36-029f197545ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:6e3549cd-bcce-517a-8c33-5582be6dd327", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:7d3ee851-38b6-5df7-88f7-6601e39f83e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:c91acbd1-fc86-5601-b5ab-6ca6e5f51d84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:11be8121-b3e1-5bd6-8e91-0c4b5dcf6272", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:78f3d9fc-7643-5432-944a-fb258d259442", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:0596d588-457b-5108-a4c2-6dc61511c56b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:d2e6f6dc-fd4b-5314-bfd3-505b7d8d0a8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:bbf75b01-9816-5033-9b60-898a2ff2e1cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:2a9762b1-d2df-505e-9af2-ec47998c0faa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:83c65d0d-c464-5ceb-88b8-d7c0120b5dc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:45f4854f-7f5d-5545-ab04-9d13001faa07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:fef3d314-f7df-5157-bcce-f20700b9c560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:9aeafe70-95ec-54a8-8a96-15935e3d9ee0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:6f5bf48f-0629-5502-96d6-287f9c8114c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:bd1ee38a-48ef-5716-88a7-551aeb98d94e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-jcl. not_affected \u2014 Version 5.3.13 is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() bug in DataBinder's field matching, but version 5.3.13 does not contain the vulnerable code pattern. The CVE-2022-22968 fix (which introduced case-insensitive field matching using toLowerCase()) was never applied to this version, so the locale-dependency issue that CVE-2024-38820 fixes cannot e...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:9a9170d8-ab94-5931-826e-b63717ddf25f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38828 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework 5.3.13 is NOT affected by CVE-2024-38828. The vulnerability was introduced by an optimization commit (gh-31834, 0970b1dc7a) on December 13, 2023, which post-dates version 5.3.13 (released November 11, 2021) by over 2 years. Version 5.3.13 properly allocates ContentCachingRequestWrapper's buffer using the contentCacheLimit parameter, never reading request.getContentLength() when...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5585dabd-6e9a-54bd-8a30-621ebbd63c9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:44107f61-6264-5b30-8220-87e3e8a1006d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:e64c08bc-56e5-568a-a497-a8d6ada3e66b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:d6fc467e-1226-55bb-8f96-27dc8bee01a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5a32ccaf-0b76-512e-b201-c441481f32fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:2214be16-bf4d-5f72-bcc3-a9ccc42cd205", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:63bd285f-14af-5fd7-b9f9-b6e1d9d49fdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:66ea3e33-3695-5a65-9ac5-2e2126e4dfeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:87a68941-1746-58d5-a027-cf4cd949cf4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:683e8512-6b2a-5fbd-8c1f-6fd6a5173027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:e00215ab-fe71-57a9-8270-c1aca2780fa8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:b1404546-292d-584b-a56f-b353c43eb7c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:93a55a9d-5614-5681-8b72-98ee200a29d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:2c499753-363f-5e79-8e8f-e43975032d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:409352ed-dfa8-5903-87cd-84a99cae2f97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:f5762c02-edda-5374-9419-1f507369e49d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:d5ca2d21-8073-5360-8f0f-2c001e974f98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:6361fb8e-6e32-5b2f-b564-37a4f46a39f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5063d9b7-b920-572d-80f4-d18feff89ad7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:c4e7c542-e02b-5dbb-8534-3ced96f2fd33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:64a0c95b-8d0b-5ab9-9ef6-383754fe2da4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:97f750f8-3a40-55ba-a067-1025c1fb1007", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:cd49bd56-374d-5815-af16-6a7fa2eab3c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:c097fa4f-bace-52d0-bcd0-c2df7e459c69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:651a9409-4f50-5f9a-b703-de6099fbe011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:7fa646fd-33a9-5977-a6a5-69e9caf828a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:d7debd3f-f02c-5e5b-989a-2697281aacf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:a179060f-7f2c-53c7-8bc4-7cb04b9a1743", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:7752eb7f-d098-5f1d-a1fc-1332942959a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5a18bf53-7d41-5718-b17f-2d9bc7a6eef7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:bd13bf5e-7f52-5e4d-8e23-c130e3e459a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:43856501-5ec4-53e2-8eba-89b8090074fe", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-jcl. Target version 5.3.13 is not affected by CVE-2026-47890. The vulnerability requires SSE (Server-Sent Events) Fragment streaming functionality, which was introduced in Spring Framework 6.2.0 (August 2024). Version 5.3.13 predates this feature entirely - the vulnerable code path does not exist. The CVE affects versions 6.2.0-6.2.19 and 7.0.0-7.0.8, all of which postdate the target version.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:d16a3062-a0f4-5dd1-b88c-fa60f75a5ea7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:92c2e78b-7b73-5b4c-b290-f9ecb1c9bee3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:9aabd622-9828-551c-a525-8915ad5173b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:cb03697d-4a9b-56aa-9dca-c47d02d9ac90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:62a4e4f2-0b67-56bc-a82a-da043ccc406e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:2e42a2c6-91d3-5001-a073-899980e35ac1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:cb35463d-260f-581e-b29e-0bd026855703", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:f752b575-6848-5d3e-a91c-7d5db77681ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5b85559a-977a-5e7f-8fb8-d1db7985f732", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.13-tuxcare.2" } ] }