{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b42ca67b-e869-5e8a-aa65-142ae502a54d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2f5d4b6f-7366-5999-a928-5b6440cb9707", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a0e71e66-a7e1-5761-a4b4-e9b19b154eac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:867fa500-fe96-509f-bee7-efe6329b9340", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:667e4e07-b4d8-5431-bb7c-2065e41bb005", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:306e4112-c904-52c0-b7dc-de3dd8e1daeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce0b0b68-4113-5993-9f38-64f232c43adc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7b782188-a02f-5586-8c9d-8c9d1ea924ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:04aee7b2-e92c-5b51-8c93-04c165cd4f41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:167e261e-5f28-5e91-bde5-8bbf58e1a9b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:72d83ae9-4d28-5400-b31a-6fbc50c90d5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:476fe2ba-df83-5e0f-9622-65640625de4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e2f0c39-d28c-5316-bca7-7c313b5c6e01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:12fd08a9-e7bc-5e13-8393-19cd41b24e78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b2a2d7ce-6ef6-5894-a0fe-b1ac8f29dca7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:debbc60e-42f5-516e-8e8c-519c0efe092a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a09a4734-aa31-58d7-9fdb-087d3c0e2a32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f7aec6a0-4039-5d50-ae2d-22fd19cf325a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9e46474e-e702-536d-bbd6-439fb391e5e8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be62b417-67f8-5a00-bdbc-bfa436185309", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d8686c77-ab7c-558e-b1c3-3dd9e701d9a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:80b274db-69d1-5cf8-817b-df3640b31e85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70f914a8-dc24-592f-86e3-7ac0c311b2cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:65dda0ba-1c90-5214-bb8c-76a3ca547da5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c42039a-a859-5072-a611-f56b649a9b3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0772f85-fad0-561d-a6ca-65c084e13ad7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:527a494d-d86e-5140-82cf-699c1898a912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35934b01-f461-5ae3-82a5-76193eaf87d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a41c1f2b-9890-56d6-b9a1-c77232a7152f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4a51c089-13a0-53c5-8858-e02c0d67778f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5649ff28-849d-5cad-973d-f0afbacd106f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4e75bb3c-069a-594d-a2cf-843b753bddd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:411a5045-f23a-5b13-9be7-1241f081ce43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ae3230a1-89ed-5aa3-aa38-fb134b12e7a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a70d93f4-251b-5ed5-9834-3fe56ca0b1c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e1e0181f-b03d-58d0-937c-9cad041c918f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5f15857e-391f-5429-96e3-5c667abc94a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78893638-bde8-5fa5-9b2b-6da909f39289", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9dc7c60e-3ed3-5679-80b1-ce723aa6d0d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:abc3503b-a9eb-5ac8-a960-10b989f0cfe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d55511c-c877-5b69-8b31-840d95782c16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1d7e56ca-1696-5321-8e6e-2477870ca253", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a334965e-4e0a-54f7-9775-94e190fbd1b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c7aa0ebc-d704-538d-9bff-761573f49773", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:941e1f38-5d00-5d54-871a-7b7317f1bc2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:63ea8c25-078f-5017-a9d0-1f34f8bddfb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ac726f89-7532-5a49-b01b-22e65c5a8910", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7b908ac6-ec78-59d5-9add-74e454aa8aae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:61077e4a-ebc1-5e70-9eb8-596ab5559bef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a7fff06-d8e5-5616-a162-8339450b63bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c80dd738-bd04-53d5-b76f-55592b94fc11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-webmvc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@4.3.27.RELEASE-tuxcare.1" } ] }