{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9661a8ce-cb07-50ae-88f9-4e0bc222ca81", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3a6e2317-632d-54c7-87a2-ca51dc99744a", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c0341207-69b5-5def-91a3-4bb8145e7412", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7a29deef-5194-5da7-a57f-daaaf2cc0fdd", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bd6f53a0-7091-577c-a615-3c0514e5367a", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c447359c-1e6e-5adb-a58e-c6bb0a7af113", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1e7345f9-f095-50c3-aa2e-556fcf01fa38", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9d9b6506-1986-503d-8bbf-3fb1a2dfc7ab", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e9d12e3f-bec7-59cf-b4ef-b15ba9f175e5", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f09f6033-98b9-5a88-b37b-2affad40efc8", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:783e6423-a7b8-533f-8d92-42b8353eccae", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8f88f20b-3def-5ea1-8bd6-87cba56d99d6", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0db4a6da-ba10-5165-a251-8501879fed84", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e4b789bb-ffa4-5539-8390-45d1b4f7fe20", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18da637a-fa4c-5b08-9bc8-c3bc4193eb36", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6fa9ad32-c847-5448-8710-daf2105130af", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4b452c29-1616-504e-9cdb-efffbf1ea4d4", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-webflux 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ed221eeb-8032-5832-aebc-f75885f4856c", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c1eefaf-7fa3-53b0-bda6-3eb9b6c425a0", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:04595abb-339d-512c-93ea-de7eb2cf63b3", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a9040481-4036-59b2-9667-8276128562aa", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b4220566-4e42-5f5c-8aa0-1d187867e73a", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:22b9767a-bc41-5139-b304-b6d6c5da1ac2", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40006997-7870-544c-a03b-5e8026ff5a93", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b8305541-ccfc-53e6-b400-110a0ca16da6", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eb3e0c29-8140-5de5-a4d0-6fa6325a11ca", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:49c242fc-1ca4-5a36-bf7c-ca1a8a18fa81", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e3508bf-eba8-50d6-ad8f-ac2d76251948", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:308eea30-5e76-58e4-96a3-f36f140be448", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9b24206b-5827-5f6a-90b1-d0d3d087e978", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4fa9e4a8-48a9-59fa-97e4-af598a58671c", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c81dc812-8d94-5b42-9472-a64623fc696c", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7fe6a107-6dd2-51d6-a9eb-6988f4df632a", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:610c0ac3-c592-5c78-b9d5-8ca928a84bce", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6678c62f-466e-55fd-9d68-ba9c8fc63f85", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d54960ec-3386-5aee-aa78-3da77161d1b5", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:826566ed-ec73-5d9d-98a3-77f3d72aca7e", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9e5dde61-9567-5ec8-ae45-e98cd64a2470", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5f2fb455-6b97-59f6-9eb4-c2a0f9ccc500", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bc548faf-6092-557c-8e0b-b2ebc9c6d774", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2aa478de-4bcb-5f2a-82b1-8f20b34c066a", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4c893e80-0eee-5e97-8efd-0b210c131250", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:34de5a4d-1b47-53cb-aada-b51a5dec51b3", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a762887c-b0e4-5243-a49e-58eaa8f32939", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6b971e2e-3248-50cf-8c2f-7c63e4e8d976", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d1f2f138-2490-5413-b006-d2e90aec2375", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2c87af21-0232-5e34-96af-6db6e31e85d8", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6ccfc32c-7bca-5617-88ea-209a6b59fc1d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:309ffef1-f619-5f62-8e29-8616b96fc4b1", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:746640f6-07c8-5e67-816a-f959b83f9e63", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e68f697d-c0ce-5462-9116-d8e9d2110715", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:54a85bed-e264-51b6-a50e-f8bffef16c7f", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a061854b-3f1d-57c2-9800-c0fb37e9a380", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:126a4454-57a2-5b58-8370-712571ffee2e", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:60e818c8-c60e-5f8a-901f-9df1075dcad6", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:326fc7ce-5956-53c1-b9af-aa06c4e6e845", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.1.20.RELEASE-tuxcare.4" } ] }