{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a26ed955-7350-5b14-abe7-788e4de9bdcb", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2", "version": "5.3.6-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:c36b834e-43c4-54a7-a571-56829c51eb5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:1e6fc11c-57b2-5a90-a0f7-1653172c84f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:3604336b-f10b-53f4-8213-5084b3630fba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a2fbeda0-dfa9-5509-bf29-b4ea1df38355", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a00681cc-7324-5c51-88d0-5868a3c2c4a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a43fc5fa-0082-5712-a092-0e415a496ed7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:2af552ff-9e7b-5e25-a4c0-5a706411bfbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a6087b61-6673-5311-ad8d-1ae514b02c13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b5a32b89-4655-5f39-9c1e-a40063874755", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:1f4a280b-e0da-58a1-b33b-0810882c27eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:4ec88f1b-f2c4-5f06-991d-f417275e96d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:fe6432db-b993-53d3-88b8-f33f35ab7e1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b4bea3e8-b114-5b36-a6ea-16f423d6e087", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:c81b42e3-4831-53d4-a878-7fdbad1800a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:0c993ffc-c917-5fd8-ac7a-7b4b09ff771d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e291adb4-739a-599c-8aea-6f32a3fa0968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:4cad478e-fb5e-549d-9f33-ea7c20796de4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b8e716ae-4742-512c-bb2d-4666cd7d7268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:dc348eae-0c75-5895-a2c2-8cc360bf692e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:d8285bae-87df-5b76-86f2-8976c7e1b735", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.6-tuxcare.2 of org.springframework:spring-context. not_affected \u2014 Spring Framework 5.3.6 is not affected by CVE-2024-38820. The vulnerability concerns locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, which was introduced by the CVE-2022-22968 fix in version 5.3.7. Version 5.3.6 predates this fix and performs case-sensitive field name matching only, without any toLowerCase() calls in the affected code paths.", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:c96891d9-9368-59bb-9f91-0c5b49e4c078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:d49fe5a7-b48a-530c-b1c8-b89dad18ce80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:45f085bb-4b8f-5321-ab14-d25313e4697d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:86315e48-f86a-5d3b-b646-cf346c634dc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:0a6ea7d0-dc19-5e1c-bb47-79e515172701", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:fe8992c3-0aca-5400-8265-83287ec1a447", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a1fd6c93-b349-5f93-88da-dad3c9ff5714", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:459e2f85-bd2e-5577-a4af-9c7126f13734", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:1e056d43-44ce-539e-ab21-0a7152a62627", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:7a5c38ce-8d07-56c4-b8ed-077914c802a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:93fb477b-0820-50d1-9ec0-8453f4573943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6750493d-0650-5c15-abcb-12bfd4fe38a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:add31fe2-dd79-5627-af3b-5e8b81ba2442", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:c75e2bd0-8659-5f79-a5a5-77f4e81ad443", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:05f69b4c-8d83-5112-901e-0247c8f7f45f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:25b38676-02de-5b47-97a1-5b08681e1217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:57749691-8fd2-5aab-b63f-26efc0bf96f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:460138c9-1bb2-5c0d-a011-0070476342de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:61f3d680-82f2-5a06-9956-55a52c0a064e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:52fb28be-7527-580a-a472-90790029467f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:79ae8480-20cf-5698-801c-0c981bb12492", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:bb1a3a85-254d-50b3-be5d-7a88d598e67b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e61bdb92-71ca-5bda-9d1f-a713f948bfd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:dd0b300a-22ba-54a9-9bf2-cea64ca3679c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:d57f54e8-6ae7-5176-a0d8-d0bf4e9f5089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:cfb56a97-3c26-5a0a-86cb-52c7f3c890bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:ce64c06f-12f2-5b9f-8cec-fba00bcf83b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:838705ee-bf3d-5671-ae5f-63c8eed9a02f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:de77d3c7-c2da-5db2-8015-c09bbeec9c79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:1acc96c2-5470-5e23-b934-f82e82ca8af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e1c4c93c-bca1-5367-b1c5-9f2478ef8557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:63a40550-1a3c-555c-ad18-6eb753881a25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6fb3b938-4a9f-51b8-8c03-5087aaa681e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:931d8aed-1ebc-5c5b-8eb4-8c3fabd549c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:5eff68ee-c427-5af3-8068-05bdada4fa54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:5a0568b6-fb8a-50ce-aa3d-ecb15d76e85e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:35f17b10-4ef5-500b-8ce3-d5d9743f00b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:4b0fd594-6cda-52d0-86a5-af8f49c76b3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:bd0701d9-8ce4-57da-a0f7-c583aa09a815", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e9b9c574-f4ec-5a6e-9328-2377ce373275", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:bd844a58-59f1-5d99-a851-b2caeac8548e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.6-tuxcare.2" } ] }