{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:895a2321-b9c5-50a9-a7d0-16034317034e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:8dfcdaac-63b9-5c68-ad52-279db1043582", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:781d7ddb-671d-5545-9c0c-69c6b105767f", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a65b7512-04e5-55d8-bff0-ae426eace7ab", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f36cc236-7bc4-5ab7-b759-0738ba8a37b3", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a8e11066-f1ae-54ae-a043-f37108785f21", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1152956e-9060-5e69-b6b8-6c3973121e20", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5c878242-d695-5753-8502-2370ef9a04b1", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c8dd2c5c-af06-57da-ac7f-b7036b931e98", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:128636af-e2ed-56cf-b939-a2d7625411b6", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:09ca0585-883a-58be-b5bb-ee1f1ec69e58", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f5d21949-eaad-5878-a1b9-fdb140dd0e5c", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6d53010b-cd9d-5d5a-993c-96347cb31f6a", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe77675c-b7fc-50da-b55b-5d75aea2c107", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bf37887c-2361-5db4-9369-11aca5222725", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e43cb29e-6dfa-5ab1-bba9-15a566364d42", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9bf7af4b-4a08-5017-a2b6-b6c9859f4548", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-tx 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:08bcae4a-b314-5bc8-8a01-4c83ce4725ac", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0ab28acf-397f-5cf4-a424-6ef4869839d5", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8fc32084-7d7e-5fa9-b327-390110aefea7", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae3d8001-057f-5a08-b502-277f0b859599", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1bd2a0c3-39bd-5421-9750-9ea629ebda5b", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b52116d9-65de-5ed0-b885-cdbebafcfe3d", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e7497285-1cc8-5957-ae7f-49c14571b9e7", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a93b6698-46bf-52b9-b03b-7466f03bac8c", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f4e781dd-803f-5d69-8413-9010c75a408e", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:11171dee-aedd-5d29-90fd-5b9633b3b651", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9e030c63-a089-52c1-a24b-287f8770694f", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:236c23bb-7775-58f0-8316-aee4c9818003", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a231041d-98f8-58b3-a5b8-5a2b0921fb40", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8a77c778-e802-5017-aa98-21c20bb76633", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0c5769a1-0f02-5062-8dc0-d341586c7e18", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cac9e9f0-4f98-59b8-9128-b74bcf618caf", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a9d44ca6-e34c-5577-960c-d5bd404eeef5", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:15683252-f42d-50db-a7e4-ee5bb68a607a", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ba48bac4-cd18-55f0-94a4-81e3cdaad052", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0e9f892f-c0fb-5eea-acdc-2943d2cebe46", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b9531431-7d3d-5b18-96a2-42d119717617", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c6a83784-c964-50cb-bb38-fb75f4888a45", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b1f0671e-f011-5bae-80fd-5040adebcdeb", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dd40caee-738c-5ca8-bda4-9c0d9efa9991", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:11cebe1f-dd4a-5c61-b7c5-d65c18684d6f", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:612b2036-9bcc-5f62-a47f-486e040357ca", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8db567b8-84e9-52fd-a265-65e1cfd3dc04", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:53375128-b503-5a50-8e45-19fa29a5a359", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3f29891e-a17b-52c7-be5f-27c74ef0e8e3", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f95ed675-5fd6-5b8b-8dce-ec66df5c1580", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:89745366-ceab-59d9-8076-26f6d246f76f", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6f5ff370-5132-5b23-ba85-a72c09fc8a27", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7306d48c-d287-5dc3-85ca-439568bb2ae1", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dd93aad5-dff2-5b20-a619-05b4ea7e1c42", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:521006ea-4461-5720-8219-a964037fb139", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4cae8365-9a6c-5246-aa01-66b444640efa", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f0e76adf-cffb-5254-8f25-629bec2fa3da", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5d1f7d9a-cc96-5f33-b647-29ca697f61c4", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:452d34ed-013f-5e20-a622-684ac9ccbe10", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.1.20.RELEASE-tuxcare.4" } ] }