{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2cd28c42-293d-55c8-8bbc-ba554aaae357", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2848175-bacc-552d-933d-f860456071f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a2862a2c-e7cc-5ff8-9ef2-c4026920ea25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2212f15f-c66c-52be-a498-1f0ca99d8bfc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:73df0bf6-ed2c-555e-b138-3eaa02003309", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be493cb0-8c79-5c64-bde0-aefdc78ca570", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:243c1e22-554f-50fd-8b62-b650d18a84f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:781414e0-c3fd-5c25-b413-43f6e7d37ec9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a8232ce0-597b-5c26-947b-1d920ff9d92e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1da8f8c9-700c-5978-bc7c-2caf805cf72f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c55d8107-6ff5-5354-ad64-d6f1c1100563", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4db06e14-6706-5b55-ae0c-e0fdd34ff4c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a917dfa4-ac58-57f5-b809-eb97c2343adf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:37a2654d-d7bc-5912-af39-fce32353187e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:186d47da-a8fd-5ff1-a331-5ad322a834cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:970d290b-fc74-5820-bf13-e728245f0c63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0eac5a49-a80e-5ea6-ad8a-4a7f792db8e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6346eb6-bd8c-5b22-9937-ff24ffda63da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e1950d1-3e36-547f-9293-2fc79ecdd347", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4d65b383-691c-5dd3-beca-da359b0c2d43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:764b790a-8930-5d64-8604-f46cd06a3ba6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a667e235-bb35-542d-8d70-10b1f8f9e335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc607993-d6dc-53bf-a5d0-294096fce6e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a68748c5-d8cf-5062-ba74-db7d0de52698", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9799b035-5fad-598d-9522-f57724633fb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:84b4126e-9f2f-56db-97da-ce9d6ccabad1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f168d8b-baef-55c8-a72c-4788209b4b88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3899d4b-9c81-5852-9f6d-29f6745cf03c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23b19a29-3508-5939-9958-3fa7f12ae2b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:59b5319b-c9d3-5594-8e95-312d297889ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aaaf3231-7bd5-5aa8-9c50-56f0800a77a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e503b581-6f3f-5bf9-8378-edec68886bbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d273a97f-cb43-577a-b85b-eb095e0ea619", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb770ecd-1a7b-56b0-b5c6-f78c119e0433", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9304b64f-3e44-5912-9abb-07f71fef4e4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5d5cc767-5304-5ea5-9ca0-f502a2a15911", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94b6a3e0-f19b-5d4e-b016-8cd28ace3581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9ba63023-d47a-5398-be41-bed4e5b13a56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:868f1e03-3c5e-57d8-89d9-86df623eace2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c214bc6-bc73-5b74-912f-2263f698b2ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0f641c7-d3f2-5058-94eb-66bf1abdbe51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7e93417-dc7a-55f0-8fd9-889c3ff89927", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fcc61181-aeb1-530f-aa30-44454316cf35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:37cca77c-669f-56dc-8201-45decc6f02a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94ed5d3a-fe6e-5d90-9112-bfb60f6d2e68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f1b223c3-9c20-5f65-a46d-040fe1b8fb3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b58b8c2c-c020-59be-b245-e6b54ab74ad2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:139a009a-3c52-5209-b07a-a08506224769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe9fc908-f2c2-5624-a2b1-ec4f565805b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:74334096-26f4-5160-adbf-e402e40c8db3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab085266-b321-5394-a0d8-a3f89e07f414", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@4.3.27.RELEASE-tuxcare.1" } ] }