{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f3a8eecc-232c-5a99-8eb7-d04831515b03", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-websocket", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:45c26a95-6fbe-54da-b9b5-9e67afcc90cc", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ff6118a4-75c3-5ba5-a8c2-ef83fab24d4c", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:13042ee6-6f26-5b04-8169-4a4519b87a40", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb94526e-51d4-5d33-915d-7206c8fdb9fb", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fd75312f-7ab5-5b37-9e44-17349fe046b6", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f1150401-e5c4-5fa9-a71e-a229a2da70dd", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:36d261fb-e490-5b4c-bc51-75400940844f", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3b030a3e-4320-5c71-94ad-7aaffa2e1189", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:349620d8-da2b-54b1-933e-f8f9522b32f4", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e1f7a279-4e6f-5fa3-80c0-93b59ee048eb", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7e3e4a35-59e7-5c39-a19d-22ab38a07d63", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3a94d881-0720-5756-acb9-7046579c452c", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:29dd33ab-2efe-5f9a-8a0e-d4816fb543bd", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f228ce02-4632-5561-ac8b-dab204ac4c2b", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6ad9d798-31da-5ecc-81a8-3f6cff6846cf", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f372321-bb31-5013-9c9f-c89e56ab88c2", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-websocket 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f95748a8-0880-5e5a-9abb-9aaa1ea7447b", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc9b60b8-03bb-5eb1-9df1-3051c794f958", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7e90099f-ff92-53e5-8e63-f0cea20223b3", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:923f52e2-9573-5b1e-833a-f3bfc2549d79", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c436bf01-c812-5316-9ddf-20bd97798762", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b745f5f-431a-5038-9bb2-1316f7533b1f", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f7994385-4c4e-5d27-b5d4-b0553a062050", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a32f5306-ab36-545c-8cfa-fe268578ab45", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:580032b4-cf8f-55dc-9ae0-08205014d82f", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c5412b14-6f0b-52b6-a231-010cd566ff3e", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:478e0e88-f4af-5d7c-8978-2e156a666b26", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d47f5440-a275-5288-84c8-465994ffa57b", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3394a82f-942a-5b59-afd4-3552720e382e", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eceb3627-0b76-5a28-8390-fe5b872a7386", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fc08020b-f9f5-5c65-8647-1c6ffefa0177", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c949ba7b-605a-5ef6-9cce-fa9feca94232", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c4a841b9-0951-5ee6-84bf-ed00fc625299", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:26ab23de-d073-5339-b48a-bc2399b8d03e", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40939bfb-c5ec-5b86-b065-bb7e9ac5be36", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2650f02e-56d1-5d71-bf70-e840844226d8", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:acfeefea-9561-5f31-bf26-e7628c7203e5", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e74a5e02-34ef-56ed-8402-aab3508cce3f", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:00c2d529-abee-5c17-ac6e-eef80bf5e2a6", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:da8eeba3-b128-527c-8619-7538a4445575", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a0ea84cf-37a5-5b65-90f8-845966db9514", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5364e9c3-5e40-5834-ad21-eda9236aad0d", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de24d9d4-b348-516f-8423-6708bc8893d8", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e74c37c8-dc2c-52e3-8f73-cb980d4a2238", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:26d04aea-6215-5b64-9de1-bfeacfc8f558", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2a0d0d01-c3c1-5aad-8bd6-bb307723cd93", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eb83b655-7add-5da7-b35e-c65792fb1101", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cc592589-888e-55b5-80dd-d26bcfac3a58", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a1f766bc-4fe5-5e5f-bf3b-0b79ffe2d206", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:185223d6-262f-5dde-8987-ad8871e8121b", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a7faec61-cd2c-59ce-8867-e6764e1ddbf9", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8c2e2cb6-8622-509f-b40d-40a452290aae", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c32909ad-ba5e-5278-a633-3b6272bf909b", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:37c51d3a-7d6f-53f6-902f-5e71eaaae5fc", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:192e04d9-e81c-5137-94f4-25eedf14d7d1", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.1.20.RELEASE-tuxcare.4" } ] }