{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:def71c89-65e9-5262-92f6-4dcee57f3ea0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c911b216-7481-5759-ac0f-477377a06b00", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9159e9fe-3606-5e78-8f10-ef1e3c6ca037", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ba4ac129-4ae0-5657-aac9-993d365c9ccf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a642d790-26ce-57e9-af71-5fb0a3f7eb60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:484986be-4420-5edd-890d-dbc450c9c882", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:07f954c4-9386-5368-9f47-2b660b7a29c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f15abce1-c16a-5fca-9747-9cafabd4c667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6ef996a0-ba92-5019-b059-af255981de5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2aa1be04-1e65-50ea-8d98-eae99524820c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:138ead58-8523-52ea-8941-949962f82b34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bb2fb093-9000-5244-855d-e0ab77ee201a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:05d5774a-82c0-5664-a93c-1b5c2df789e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dbe300a1-c23b-588f-a9d3-799ad59b254f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5525a491-b0d4-575c-8654-79c4388fbb23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ad47a5ae-0104-5f24-85d4-790e44cb1ecb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:95b48ce7-e9c2-57cd-8d07-bc4d49b5d3e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8c448619-fd33-5323-a24f-ba77139b810c", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:da0a2fc6-293e-5d08-9194-a2f7c0cd41a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e288fe3c-7847-5431-ac81-dc11d61e2ac7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0edb086a-fef6-59f8-b707-4fa96bc5c9c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c7be92b8-ea96-5216-a335-0359515447b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c983b527-3ee7-5763-ab06-3d252c4bcb6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:64c509b2-399f-50ab-b4f0-8a5cad3d6006", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6c246311-8a66-5ce2-a994-72a7940c142b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4004cd5a-f5d2-538c-8737-9cc139c282d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dc5ea6bc-e344-55dd-8738-a0e219312fd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6eda35b0-62ea-5df5-844d-6a3d41146ae7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:073c88d3-f41d-5292-9026-132f5e2b44b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c1856eef-2da0-5d60-a0c0-ddae5074da42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8f4d7f39-2807-56b0-947f-7d2f8bcce4a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4ed93893-2d72-521c-8114-c67ee11f0a2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9e3475f5-6200-553b-8c1a-9e788090ac11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:43fbe5a9-57e8-5654-8592-596b5d3026f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c8ad3314-026e-5730-bad7-a847d102c89b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:024c6357-1c3b-59e5-af83-08fab913e2c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:68a6747c-ea78-5b94-a824-c116cfed5293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6137f557-93a3-5f80-b00a-95e5faefd796", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1969a076-7e30-5340-a6e5-607e3abc07ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3d252c11-2f6a-5346-8526-a27bb3c98b0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5e44e8fd-dde8-5e68-b5c2-7588f743f5d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bf2908b1-9f08-5e1e-bfd1-25b4f893c41d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dd6060cd-f937-5505-8749-878f46a58e47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d3b82486-c096-52e7-9cb2-2e401f926e75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:65b59a3c-448d-51e7-8935-91d5a0065aef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ec084078-4aab-5bef-8a01-42d1af7fb47b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b028869c-62fa-51ce-bd73-5fa1a6fb2b9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d3595023-8ec2-5c34-8578-d50e148e3dbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1a3c4bf8-345c-5d93-8425-405863bf91bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d09fd61d-edaf-5c44-8cda-63f55e618ed5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d404645f-e56c-59ca-af45-acc62b1876fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8b4ae03c-6dd5-5e30-9741-0091ac549478", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:79ccef68-b4f0-5e34-bc42-7aee7e84e69c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a1739af5-6ceb-5edf-a452-c89807613768", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:418e5b3a-56e0-5b30-a1f5-5bf7ac686fd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f23d8e87-1441-5edb-9d24-cb0abe99765f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2e084781-364a-5206-afae-004fb916590c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c5a3a98a-ab0f-5f34-b8a9-8e4c5083b8e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cb8c289b-5abc-54b6-8c70-8396870c1542", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:04a5c5e2-af32-555b-9c99-18502a5c454e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.1.5.RELEASE-tuxcare.4" } ] }