{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:89ed9b4b-1444-5a09-9d0b-afbf4493c3fe", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5b0e6a0d-8954-53d5-958f-ae957f887602", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f9a154b8-6637-51c3-b53a-21474bacdb96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:10505966-2ebb-5fa3-b76e-4dd626a71a86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2909dc89-ac71-5143-8ccc-b49ccffd32f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:83749e2b-f984-571f-a884-7ffdec117a15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5950de03-2a2f-5606-af8c-f9118b86b2df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4e171f81-8407-5437-a036-83b78e1dd8d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:16619fdb-447b-5901-b3a8-d249f0761e3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:90d1af82-aa7a-54ca-bc6a-531c58b20922", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:259e60f7-116e-5213-b2a0-cb08745b292e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:55d1a5c7-008f-5cba-9993-8de39a4069c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5a813257-f984-54d5-9719-a5cf963a76b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:adc6e645-4295-571c-8078-6f924fe81f48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cf3220f4-f07d-568a-916f-d8a085fd8ed2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c6bde08f-7073-5aac-ad19-accf62aeae0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:063727e3-e5d9-52ca-9be7-fcbd3b927f05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f9afda04-c890-59e5-b0b0-04573c809f0e", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context-support 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:32c411e7-46f2-525c-9b07-be3cefb87a0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cfd4a6e7-5447-51f1-912a-2863cdb33e7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2bad875c-7d3d-5c67-9120-03520ab5f9bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e1d4f3ad-d1a6-5f51-b9c2-202b907feca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c37abd4f-c318-53c9-8d5b-ae0aebde4419", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:47be7efa-d4fc-58b9-8804-f93a90bab170", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d1bb1573-200e-53b3-9aa8-a193d2dcf7d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ed7dd34e-f976-5798-9cf8-27e50919d530", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7c35a4b4-14c2-5bc9-8e83-456594f0d788", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c118aad0-e3e4-5000-8c46-4bbe32dcc604", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:63c6e216-99a3-5c8a-b7f8-0c094657207f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0690b787-e0f3-5c00-b917-560e290374ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:78540c39-a554-5370-839b-d1496b0de8ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7034d5e7-5257-5cbd-907f-c437984c19b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6703eacf-872a-5b55-a556-8bd5902be5af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:184823c4-aaa8-5e46-91c9-be87d9ccb3d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:07245c11-ad1a-51ef-84de-be781185ebd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c39bd74b-7e7b-5c5c-a718-ca6518860e6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:df6bcb39-57fd-5f4c-8d90-6b5131e9fb6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:966dab0e-82fb-5eb6-b57f-6e3ec90bb875", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c043056b-983c-5ea3-ac66-1d64e57b4839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9a1b69f4-9bc4-5a28-9d6d-c7ad67c35daa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:66ab15dd-3953-5299-84dd-495f1350ac25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:42d382e0-ff26-52fb-ac69-41435b5f2e35", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4acaf483-43b3-5a03-a982-d1eb929d9b53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f7eff448-a726-534c-b3fd-e20e6ff53f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b5fca83f-921a-5c2c-ba7f-079f2f75bae6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:379b7c1f-7d5c-59f3-a01b-047e10ad02fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f31b4197-12ac-575a-a4c9-282edd9da81d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6e40c798-d541-5aaa-a02f-2a98cbabe3b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6dd325d5-775a-5f42-a89f-de6a588e419e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e403a4d4-8665-58e0-9ebf-561388669ae9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:361f08cc-d7b6-5ac8-a338-44f4e2ab2b4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ef1a2f00-a546-51ce-af31-e9543ac0a4f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8295b269-cb00-54a7-93da-d766ed46be6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bfe49766-46e2-51a6-bce0-0415aada3b49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:60ad5e90-51ee-5248-962f-9d1b7253ee95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:43aac84e-7a4d-5da5-bdbb-0a9ea8f0fde9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f2702361-4557-5e2e-83ca-63cc869acfc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4594028f-6dd3-5211-af7a-a02eb7290471", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4f852fb7-4c3c-50a3-bf8d-b072cc265cc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6565f14e-b3fe-5bec-9eb9-85c074530dd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.5.RELEASE-tuxcare.4" } ] }