{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1fa0d77a-5b55-5baf-b25f-67145cb37273", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc-portlet", "purl": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96354cae-3451-5a4c-a775-1c45f874974d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e23c3651-4219-57bc-8e49-94adf683ad61", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3de2c453-d7a4-5a71-9f9c-ae05d86234f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8db39fd-0f9e-556d-9578-37943ccac827", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a260bc1-2b27-5042-a9db-a9a82684971e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a710f7a-5850-592f-a2a4-c8b3315c8f15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d72e9b24-38de-5dbf-8d8b-be04d1f6d997", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff209085-6bb9-5f15-8a3f-ff23c4890fb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e3f5def5-d44c-546b-b4a5-6f2a220cd148", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:99fd38ea-b942-589f-981b-d797403bb48e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:faf57c9c-53ef-516b-8e99-4b737c217e96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fdfb7cd4-7918-5491-bdda-0b11e962348c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d217145-1f2c-5031-9865-4056f00ffeae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca343b25-cf7d-5ccb-9c90-0e3d55065817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b296245a-6f82-5876-8289-54ee07e75eff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85e79c25-af51-547b-b954-e48c170e2db6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5021090e-bdb5-5871-a62f-c7d979fdb322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b5d08231-146c-5b9a-b840-9b7e256ecbf3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78909186-a4f8-5b35-8414-6cedc5e8b242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e8768c25-f28c-5b6f-be43-e36a933410dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5deda188-6053-5560-87e8-638f517304e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b23634e9-851e-56be-a0a8-4dbabd4d08fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8ccf5dfd-337a-5783-b507-23ced59754b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab5360e7-eeed-59cb-9723-87eba9d06462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4df2a6c3-d293-5425-ab63-e886fbabc5ad", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11dd5760-182f-51f4-97c0-7e6e2d57e7d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:286c9ea3-eb7d-5316-9021-6ac2ccdd36bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e499c99-fdb3-51e7-bf11-da2606b01328", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0f129c5-e17f-575f-89b7-4df2183caedb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff5163b0-705c-502a-bc04-8f8b7bbb8803", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e02810c-60cb-57b7-bfef-a1f0ab032eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e7fb6e12-820e-5930-953c-75b1afce17cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7512b442-488b-5fd6-89ae-b79eb263964d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e628b3ee-4ffe-562d-a0a4-ee46fc958c27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ea3cece9-6b70-5165-94ad-e6e527dbb9cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6044aba4-5739-5a7f-af5e-492db5bb0840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:12c69704-f4f8-52f6-9665-e6d4d7e8aa40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24350891-8439-5713-93c5-4d1f48447d9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ccbdd0b1-519d-5d42-8694-55968b1fcf1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47bbcc79-cb08-547c-905d-9f73035fed8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09d88ba7-69ed-54f3-a5cd-31c1c8e974ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8eb0fd76-abbf-5292-b84d-99c2cc9b084e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03ad71d5-146f-5c22-97f3-e29bca02ab16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4be1f6db-ba56-5234-a44d-8832f04c3cc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e29bd59f-1766-531b-9566-9c7895aa8832", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b806d269-db13-5b40-94bd-3b790a7fd3ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ad868c9-9211-51cc-b6e6-3ce1cd7df470", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d1ab8ce0-6c13-5624-9ef2-70bd327b9499", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4cee4a4a-80f1-5784-92b8-649bac5fceac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5928e261-66de-5a79-b9e0-addec83af6ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc-portlet." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc-portlet@4.3.27.RELEASE-tuxcare.1" } ] }