{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e559fa02-07a1-594d-9243-9204e8c8e904", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-orm", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:75f979e0-1153-53e1-b73e-6faf35522a56", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb89ede2-298b-5ab5-8486-bb2d628c30dd", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:512ac4ff-f24d-5a31-a888-cb70d9e3009a", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:56dca480-7e23-59db-b74c-6f5f13d8f613", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:86c075ea-f951-5405-9911-aeb460f39397", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:00c17a0d-26ee-5f98-9422-1be6281cd4d7", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aeaca1f9-f880-5e07-9f54-deab218741c3", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae797160-babe-557d-a07f-5043e67280ed", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:91175480-35d9-5a28-a182-4dff8285f4dd", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:57b504c8-c07a-5504-85f7-f1765aa0b966", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:83c01e5f-de15-59a0-b3ef-03e8d20332ca", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:93ce26da-65dc-5618-a7e7-ad8840bcea49", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1e5f50d9-df60-5d2b-9b8c-6df28d56df95", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f152ba26-aa1b-5a71-932c-3c91737d7117", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f43d208c-86ea-5023-a425-cc49f383fe95", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:647fd663-9f71-5fd2-9df1-952f808bdc77", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-orm 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4f7a25c0-2d9d-5ffa-a783-7e0c66fef5d0", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:81465308-575e-51e1-905f-a1fecda85375", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:56da5588-b7f8-5d94-bf9f-8cc55ddb0957", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:19fc1263-c005-5cc4-8e9d-5168a8ba516a", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b0b1321f-bc71-5ec0-af49-ea9900d9ccfb", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d38d5b0a-9438-557b-967a-6692d7a5d0a5", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:33630a16-3b40-59a8-afe8-df01fe5d91e0", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de59ce61-88a4-5ab3-b17b-47e73fdef6e8", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b6972278-d4bf-510f-99ca-360c21a197c0", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f943b2ec-949f-5cdc-8105-42f3e3b049ed", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:efe7ed2f-bf3b-5dd9-a778-0646d6dc2318", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5b25396e-d445-55b8-92ac-b470d8778195", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5a034fd3-9408-59ea-8796-ff44e270da7a", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a4df2e0b-3e59-5a76-ae57-2d447bd3211b", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18c28bad-5e5e-56e1-a81c-1f90d83890a8", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ac1426f-13f1-538b-a6ff-b910c93648af", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2584eb77-e89a-5dfa-b0b1-07e37ea5b534", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c63cfa86-433e-5309-a5b7-72eb3d0aee55", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5b450c3a-cb32-5543-8023-200a9bdca5d7", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f9bb3c28-e11d-5a4a-91ba-993b83c3fc33", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:12b5f81c-0396-5c67-821b-a9e3590e7b25", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:00982b98-5fe6-5ae2-abcd-29810fcfd79c", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:51ee99ab-a96d-54d7-b01a-9e20d551040a", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:00a5b950-79a8-5888-ba06-5af5bc470b82", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:49fee83f-2935-5a11-8512-f41e668eeaad", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:14f48a5d-a3a3-5d9b-aeea-b7f44a2878f0", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:64d1f83a-f601-58e5-8bf7-78ef9b09e5c4", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:16f4c410-9455-5c50-afbf-71620e6c2b9f", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:630872ec-2626-564f-8b7f-82cc19947531", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7315178a-2d63-5c47-a50d-cdaf0b862a4e", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cec6dea7-9158-5191-ac20-90de3b4cf0f5", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:071ac715-7c2b-5430-bce3-22d6a5c42317", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d59f2c44-ee20-5ee0-a6cd-32f5cc74679a", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:684ee15f-b212-56b7-9266-a79c832b16fd", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:39a6e9fd-80cb-52c5-9524-8c2a4926dd8b", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:39ee697a-2a7d-5211-b39a-9dced77b3844", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8c72ebc0-b287-5e1c-aa8f-9619d37b92a0", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5b3363ce-e871-5b26-96fc-5328681b6efc", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:56dbc5e4-adff-5eb1-987b-ed4299ca881f", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.1.20.RELEASE-tuxcare.4" } ] }