{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:48152482-282b-564a-a05a-c26a1c3b4779", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2", "version": "5.3.13-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@5.3.13", "type": "library", "group": "org.springframework", "version": "5.3.13" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:941253be-9a74-59cf-9146-1606a4c62b0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:77868df4-7d79-5d15-9ac8-e9e903a969b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:3c501ebb-f843-59cd-8ee6-ca78d2b8bf24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:a55190c5-c709-5813-a0a2-69fc1d7d2a4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:fb721000-5039-531f-971e-c4680ddd3d62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:0f16c4a9-e405-5902-b514-29def1a71664", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:20c9cdb1-5aa5-57e9-b1da-1b9dde8f8021", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:d2dc7075-49ac-55b2-9ddd-8cfa08964ad3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:f7e1622b-5a62-564f-9bd1-91893861fde6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:9424b69e-f080-502b-b58a-1ad843d37e0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:7554929b-9632-5a70-89cc-8e7c0bcbbb20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:cfc15050-aef5-5af8-b1f8-36d4d82e7a5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:847a2878-ad8b-5fd7-84f5-d2336fb82f7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:610a5ec7-d3ef-5e8d-851f-67b4336956dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:0cddf40e-6a2e-5577-a1a3-206d77fb7e7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:dbd50135-078c-5f9e-8417-a73000b84186", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:23ce62b5-9981-557b-961f-ca32ea9b0082", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:25211ed3-e4fd-5fcb-86f7-c12a609f4de1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-orm. not_affected \u2014 Version 5.3.13 is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() bug in DataBinder's field matching, but version 5.3.13 does not contain the vulnerable code pattern. The CVE-2022-22968 fix (which introduced case-insensitive field matching using toLowerCase()) was never applied to this version, so the locale-dependency issue that CVE-2024-38820 fixes cannot e...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:348f5a19-aa44-5abe-86dd-514c4d07809e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38828 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-orm. not_affected \u2014 Spring Framework 5.3.13 is NOT affected by CVE-2024-38828. The vulnerability was introduced by an optimization commit (gh-31834, 0970b1dc7a) on December 13, 2023, which post-dates version 5.3.13 (released November 11, 2021) by over 2 years. Version 5.3.13 properly allocates ContentCachingRequestWrapper's buffer using the contentCacheLimit parameter, never reading request.getContentLength() when...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:61f49228-9912-5f33-a1d8-4e85cdc9c7ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:b5183e7c-6bb6-5af0-96be-18af68cc26a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:9c444072-7377-5644-9c01-9ba19e8d3088", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:9bc3e9e4-239f-5cc9-a5a7-0f5d387f1a4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:8006d6d1-a23c-5402-9dff-a3ac225a7dfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:472d26cf-d553-56ab-8f71-c397187ccfd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:32412dc7-45cd-5c1e-b222-f1c04b6312e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:567dd592-1517-53d4-8228-eaa0630305a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:67076d3a-0a9d-5694-9fc6-ccb280c972f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:31174563-55ed-5124-ac2c-cad360f55418", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:8cf4ae71-29ab-5d5a-911b-2ca7e030226e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:7b07f515-e38b-5db2-9ff5-56d7f4fde001", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:414fd312-6c43-504a-a596-3f0c675bfbc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:683374de-e71e-58e5-ae01-74fc9bcd4efc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5562fb27-31d0-5250-aa95-b68362312655", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:4d2b3f74-e658-5ad6-b7ad-bfcb8e435f68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5a606feb-6438-57ff-8b06-c3df87257ebd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:1cb81366-11ea-5339-a870-23566b7f81bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:19a18848-20e0-529e-a89e-e336cad504f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5f35a0e1-d91b-5e47-b138-693e2da76bc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:07a479a4-8b98-5980-9da4-7dd1b0bcf501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:7bae75e3-a9d2-5e63-9e31-2e5e59aa8947", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:844bc96a-3fa8-5ad7-9b36-27c0c82bdc46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:6bf50985-bc1a-5edb-87bc-b1d076c06061", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:dc609483-8881-5f99-b10a-4622ec208270", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:50eaeeff-9e43-55cf-b5c8-39a6b465056f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:a15ade26-1111-538c-a724-77564a38575a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:5ca54c76-53ed-56c6-9c72-31b102d9ebf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:f8fdb28b-21ce-5c29-bfed-efa25fb39128", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:d4841e15-0f11-5e2d-b211-d4be86dae8f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:672b2e92-23e8-5895-a7a9-58d222099129", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:bb8c0865-10b6-5f3c-8684-9cc7e04dec27", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 5.3.13-tuxcare.2 of org.springframework:spring-orm. Target version 5.3.13 is not affected by CVE-2026-47890. The vulnerability requires SSE (Server-Sent Events) Fragment streaming functionality, which was introduced in Spring Framework 6.2.0 (August 2024). Version 5.3.13 predates this feature entirely - the vulnerable code path does not exist. The CVE affects versions 6.2.0-6.2.19 and 7.0.0-7.0.8, all of which postdate the target version.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:f62fb3ac-ac41-501d-80d7-1115fa1ece28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:b3be9b99-58be-55c3-9fb1-8e8c38273818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:05936a8a-9cc0-5c0d-8636-e37cc77e95c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:1c94d852-fa9f-5733-850b-804b9a4ae3bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:dfd9cdcb-722a-5d4a-8bc6-834a777e0066", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:53ea270c-ebb4-5d2d-83b7-a89dbf260e18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:7dce33f3-16f7-54c7-9b46-56a45d14946f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:0597c85e-1479-587a-8df9-42b7449e3a05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ], "bom-ref": "urn:uuid:65c9ce5d-841a-5d68-bc62-dd8cf463b1d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.13-tuxcare.2 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@5.3.13-tuxcare.2" } ] }