{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8b0b5418-0f9d-5b3c-8f22-b514f2d40647", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6e3c736-c644-5871-a48f-0989ddbd175a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:563bd378-0c66-5c04-b8cf-dfb35a8d88bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b1657641-c984-5c01-8d63-1bf15570676f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f92c21a0-a38f-5eea-9208-bb8a470da84a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b66d4f0a-91e3-5d99-8c10-6b7bbdaccdf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba40ac4c-b9f9-5068-ba6f-3007e2984a17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9aa5579-3d79-502d-a3b8-5ec39848e24e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6dbfb130-d755-5363-af31-d1b8f575ded9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1488aa6f-7939-5560-aaea-78cbc3bb28e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e908adf8-ce32-550c-9504-48cdd1aacfb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c200052b-736a-592b-93db-b52f7d50b2e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:13ffca77-b193-52e7-8bf1-42936f0ee6cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a5713f36-f910-555d-88f1-c2e895425597", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:00df065d-309f-51a2-aac6-f4623ab631a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b7347a11-815a-505f-adde-ba0f1b4b39e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6be1463-9b4c-5d46-8f24-c2ba7f8b7cba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4e700953-c811-552d-9982-ac6c5a3a692e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb323433-4984-5dba-91a1-7dae7b2a3079", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dfc16619-4ff8-5163-ab1f-b80e135229f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff251586-64e6-5c6d-8f50-855ee03951ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:68e910ca-7ff4-53ae-8f0e-d1cc20b44eaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:573e64c4-90fa-56fb-ab43-11bb239f497b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:026bb7e5-1226-522e-a40c-c33322319b85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e26490b0-e95e-56cf-9f4d-94a85de59bd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:50d654a4-8ea8-5cef-a1ef-6d955a5a5029", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:40064067-f2c9-5daa-b05a-86f5de36f81d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3f938e68-a784-52a8-ba71-407c9fb5ec26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa5d6a04-d363-5fe6-9b1e-567221094188", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:418d16f5-2348-5c87-a1ae-7f320c79cbcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d3ac66c8-dc3e-5521-af39-1e2fc19ed930", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bb648c39-5563-5249-b3ea-a910764e244a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82903b81-3530-576c-905e-2cf07e8f1977", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:64a2e737-a65e-5efd-b052-d0f5f875b07d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d5011b9-4467-510a-befe-2a5e7dff257e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:39bb9f02-44a5-56ae-b3b3-264e9c8bab65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:04735bab-c986-5641-84b7-9d061338d25e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c8fe90ad-7b2b-54ac-bcbb-ab75ba6c637f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2ba989ad-449e-599d-a042-ff2bcf5e7e83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a93fc522-2de3-5268-84f4-4271aa7edbeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91aa0b1b-d3c3-540c-ba30-c5f61d16b75b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ad27af9-9ca0-5660-90d2-816520a6c4e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec7d2dd9-ba80-5f08-87d9-09d1bde3f878", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c2d8f75-2562-5882-a0e9-889a3365c30e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a3c6881-4761-5561-b0ad-11ae43d2d9a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a6c4f4d1-ff42-5213-80ac-c3c24ed5e48c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:725aad44-7b5f-507a-a3d5-78c2a83ff226", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:97b947a4-e777-5def-a763-4b635cfac915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:22f737e1-0643-5d43-b6c1-89044fa74cab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a055113b-534a-5db6-9c57-6de7a7ebfce4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c33b607-a161-5156-b48b-19b479c41ec4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@4.3.27.RELEASE-tuxcare.1" } ] }