{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:21a9578c-da9b-5ac7-83ba-ff8aabf83c2d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:98e12a2d-473e-5503-8ea7-e95f97f088bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5dfe1fd1-eb79-56fe-8844-a9c87f8295e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7a16463e-5dcb-5c47-af1e-e9e9d9473eae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:184983a0-ed30-53fe-98e5-99b952821d70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:be94d4dd-42c0-535a-96d6-63909ccf1dce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:37eff307-e595-508f-b957-bb5ba3d0602e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:91d30294-f052-5b9b-962e-dd8fcef96d99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d8f4f33d-5b45-5559-8489-e9aeb35c0fda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d3bb801b-9cbf-56bb-8329-844446581c63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:106103e6-134c-5e50-b945-d0b933d167e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5b70afdd-29ce-55cb-b09d-e99ee262c46f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:afdb8b8d-2aae-5c14-9a20-c43a738fce2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fea66948-d50c-5b4d-88a4-1a268d6dfafb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:08ee61b0-e97e-5c7c-af63-87a81d48cdf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:091c1df6-721a-5d75-b8d9-f9d0727211d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:feed82e8-c1d1-50a1-8444-e5899e39fe66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a19761d8-ffa0-54d7-bba2-07a9509997ef", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-beans 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:45b91737-6e6d-5f77-839b-0fea55b92a51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4f456b6a-67b0-527c-941a-0225c748974e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ddc8efae-73bc-5fcb-920a-05f48659cbf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bf90a57e-45da-5331-9089-8dfae5c5a2e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c3272565-201b-516f-97b0-57027b69c497", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7247dc4a-64a0-5212-a1cf-449b28babde2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:07e73ce5-ed7e-5c41-b156-3fb25b407e67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4dcea98a-cf08-53e2-8bf3-e443f1d03623", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a49c6122-7c46-53f0-a09c-3ca5f241316c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6e9af228-b5f7-5405-afcb-f815b7055c16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e013424f-0c84-55df-a59e-cb0bcbb78fde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d3875b42-4447-5f01-a09a-854023930726", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f43c1c84-d960-5872-bab7-7e02243820ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:58ba8d84-3b35-5858-94f1-c8391c7ad5f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a56f2b3a-302c-5cc1-9d51-9b0133cd7fc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:11c40d89-2a98-52c6-a68a-55b41bf5c54c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:39daff88-83cb-515e-89b1-2a9aad4897fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a9e3d874-5e17-5ff3-a235-ba3ddf32f6f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3889f261-3a4d-54b5-995d-2f56bea83804", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:966e37f6-d9c6-5761-b1bb-28c2edab35b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1110fdd3-7cab-5202-934f-dc9582926a04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5eea214f-0513-54d8-8e70-eecdb8a61e12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:646bfe2f-715d-5717-b9d4-dc80efdbe45a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:180d53e6-f18d-5563-8f2a-4754812ee03c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:11533fd5-b9c0-5020-98ef-292988d656d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:39010a66-0ca8-5dfb-89c7-e7e767933140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5bea7ec8-1f13-5b8a-80cd-1a559ae5d69a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0b8f9ba9-5cee-5fbc-a416-3f491105b995", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:98e47659-8244-5da5-b20d-90baa02f42f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a10bb321-d693-5012-aaea-92aaeb0c4c70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2dd308b8-e44c-5aa2-88d5-ad5f261c6eda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a29812cf-c6bb-537a-a166-49f3721d3596", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d7c750e2-3883-5ac7-a4dc-2871f9a4cfa5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d330c1a1-f3c7-5e8a-bf6a-ab3162f4d3a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1f44cb72-c07e-54df-bd4b-cdb0b4897112", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:47d16df4-3424-5273-9711-de90cccb304e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bca64e52-bb3b-54aa-a7eb-8323d8f06498", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:948f670c-1a3e-5557-ae01-f691456cb7ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a8e30d05-9b18-5be3-be99-95eda5eb4635", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:aec38a8e-dc32-5a99-bf77-cc63ee4bbd26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ba09b419-c37b-5a63-b741-8e3d3a4602c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8b31072f-94f2-55bd-9ad6-f45cd257a260", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.5.RELEASE-tuxcare.4" } ] }