{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:36b7ea0a-0ce8-5cca-9fdc-ddc3eca11a74", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:37ea220e-a82c-503c-bea7-a39ccd5a4c70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:af74964f-4ca0-5eb2-a4a6-b97400cec32d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e5bc903f-6302-5207-b1de-3925fe989222", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cfc75ae4-5d3e-5d3a-914c-c86d7271aa9f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d74f5d6e-9fb1-5836-9656-73bedb832036", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4147ebe5-f1b8-5f2c-9efe-aa028e8f5dc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64792389-4344-5c55-8d3c-3650282dfbd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5b9ad179-e779-5fb5-8ff1-18102e822f46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f2fdced-7a07-5550-ac00-5cbee16cb9eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9959d8bc-cdc5-541a-b502-e9ade9174f65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f828588a-1ad4-5753-b1fc-9bddc0e28b8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:49e6bdcc-123d-5d07-9c05-9a266e559491", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96533288-4fee-5562-ba51-422ee2421e24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:42f2da99-6488-54c2-83f0-8ec6aedd7e65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bfb8e72b-3c05-53bf-89f3-4f35675ee21e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47177f92-8bcd-5ccc-82f7-3cb2293eef89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c1c71ca6-2739-5f59-8dcb-0f5a855b9aa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba5b1b6a-7daa-5506-ba57-721776e46eea", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6afddda-f47e-556e-ae33-600ed4309c57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4099482e-ab68-537a-9c48-399320c2906a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:28821f9b-b04e-5a3f-be1c-ab246288adfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c8cfe259-d2e9-5f96-8f9c-c23eae202ba8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d22d227-be75-578c-8a34-348e1c4cf46b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:75a398be-b4ea-5313-971c-39b7e54c745f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09b3ea3d-4b27-5056-85df-08311537b658", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e759783d-8bc4-5c6e-8ce5-7e7901030a71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2bce2bf7-8b62-5c63-8d1d-5121662d5cf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9fe97804-f43d-5424-b9a7-f890c08fc829", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:46a59cae-ba89-5952-a21c-970000ba0b36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10383df3-db11-599c-909d-80369cda7de8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8154292b-9809-53c6-b25e-167579515fa0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f9c545b-d781-532e-bcf5-1cd456a4f5ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3105b8e4-231e-544a-b15a-1e35d39d179b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8394973e-c191-5424-b103-e6e763b3d4d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4dd4ad1e-a358-59f5-ab6e-8ab4772168d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85a8a382-39b9-5a51-8a47-77757c231784", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8f57d3f3-3bf1-54c5-8af6-dc9da5c61e4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:44a20191-d82d-5037-9a4c-b6514e141832", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eec2b91f-b7ac-5597-95ea-0c39106f51fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0af36d1b-4d20-556d-bc2c-e7cff36c501e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:79f3545d-a223-59cd-9401-abfe5125dc48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d0681ec-ace2-5473-9bdf-e82824ad66e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f393733b-8b1f-5101-a6b0-384a3e6eed8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a6ececf-24c6-5485-9cfd-92680d944123", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c4d44275-e284-5423-afa2-f83c03cd4e9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:482a4f88-df5e-5574-b5b6-6728ea96a1a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:00cc0d4d-f33e-5c41-8409-0e4dd8a5f0a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62e9a162-59ee-57e0-83ff-c248a9889b50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:90174cb4-4eea-520f-9a3f-38526d1aa0c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8312219-692f-551f-a395-b3f4c4a214f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@4.3.27.RELEASE-tuxcare.1" } ] }