{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dcac6011-ae94-5112-a1d3-feb888d08a1f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:31695bfb-b164-5831-b743-621dc63c3ba8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76480a0f-58a2-594d-8d8e-ff6e7c4b42e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:57f5be41-d7e7-5020-b0f7-2cc4fa15dcdd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:900fc5f6-27ba-50ed-b03d-14652c0fe931", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55aa86a8-4298-5a26-8648-8d543eee9cde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a0464682-c3a5-56be-b663-52e727776490", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9193d487-3c19-5a81-92d6-9b5afb5b3428", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:015c6007-6717-5fb9-9f2f-49b9273022c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:80b8c90e-b9cd-5cbf-baf7-7c2059f8af50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e195556d-dfbc-5e06-8652-1f06f1d5e0ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c2fa1aec-a1f3-576d-8e3a-f1eff05a663a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:047706dc-b40b-5c17-a65e-ff56eb40fd21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa1f3d89-d5fb-544a-8673-de984f7d337e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cd277c4b-4d19-50ca-994a-51bcd42915b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a3df9b49-fe1e-5e70-94b5-cfc6111d7871", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47fe6e1a-c5cc-5288-b324-fefd4b40943c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8b13e2a0-3432-5604-8af6-8931f60c541f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:76d70cff-f17a-5ec5-9de9-3f63377ed20d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:149c7b8b-01ba-5cec-bff7-5454c52fff77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a49e21c4-36a5-51aa-a4b8-f727aefab6d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:382e1cae-38cf-5fd1-9ffe-691e427a265f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d40b2225-4df9-5eda-8f02-4c5cd6ccc354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a7e90949-b483-5dc6-b4b8-414939666b4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c41c05e-ad3c-5e7f-bd59-16f2b89017f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f069e989-db96-5acf-8888-d26c11e85426", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad89d61d-c835-5976-8b21-e043d845b48d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10e583ba-fd83-507f-b15b-fdb6fa41fa47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f4120df9-db70-5327-a4ef-276cf44d01f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad09c941-f106-53d0-b256-1e926f6f35da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77776202-5605-5dbf-a11a-3217295964b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab164137-9a4d-59ac-8f32-852c0d7e6bce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6665004c-d913-5a87-819d-f430837988ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ac3dfd6-7911-56a3-afb7-0951c141b054", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:212250ac-6bba-5f6a-9794-6b93b2deb41d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ef4d856-b803-5336-839f-095d64bf071e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:614fa38c-34c6-5656-ac45-dbc2592eb511", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b15e8a7-fafa-5fe6-ba08-753ef1f75446", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0fb96cef-8e70-50ad-ab2b-1c8ccdd60008", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:87498bda-8703-5dfd-b944-91a7935d35c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7b24eb9f-90ab-51fd-af01-73a2d9abe101", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1ce045b2-fd96-54c2-a19d-a00921d5018b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fbd28622-ae72-584b-be92-ad65319e1511", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:45d166f0-2b24-5b1e-90ad-472f255fcbf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b7f9bb78-2847-51d4-b822-fbd0d4d6f41c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ddc2400d-0ad9-5f3c-970f-8ffe40a328c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7c447503-1c8b-5ad4-bf5f-f6b88841d331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82606175-04b2-5fab-800e-53064872a2f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10f8fce5-fa63-51b5-98a4-4b158ac31c06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2c33bfd-5e0d-5178-acf9-3112c21f5c0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be8194dd-39c9-5415-934a-83cea55e7bd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@4.3.27.RELEASE-tuxcare.1" } ] }