{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b4c2fe32-f729-50ff-8940-32cd67f31eac", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:445c94ac-1ab3-58a4-bbe8-af58a8814460", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f0b5c93a-a0f4-56d8-a07e-7af3ea0ff480", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9d3cb1ad-7d58-516f-97cf-9b7942e25cf3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f943215d-948d-5955-a2fa-324102d0cd15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6a79f63a-55d7-5778-83f5-5eb3b6dbbab8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0df3a191-8308-56d3-ae19-334f584800ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7f68b284-a9c6-5469-9bb8-33008874ee07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4eb46141-e7d4-59d8-ae31-fbf40ddd186e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4298374e-2bbb-5d93-b88f-1bf48037463d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dce82653-f603-571d-a5d5-4b61ebb422cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9d00e68c-63f0-576d-bd7a-0abade28deb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9b77ac4a-785c-5b11-9ff9-99c5b59fb4e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cba365f9-38a0-5aac-8986-435152da2e96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ad895ebf-eaab-5d60-8503-55dc276b06ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f5c2357f-f209-5714-a3c1-9e03b0b43cf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4470fd0b-9927-5e1a-8dcd-2b677c7f0363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3d96594b-a0cf-5939-9f51-61588af20e5d", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jdbc 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a5d9948c-257a-5776-8226-828e12c89867", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b3f86ea7-d51c-5c77-bee1-b0f5a0b6cab6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b426cd6a-2a26-5b86-b5ce-a39a33bd1970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c8c5dc6a-1053-5e3b-9088-32dcdfe7c27e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0afe2456-5d1f-5428-b6e7-5cafc38c15d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e85c8432-0942-53ff-ab87-15e663316711", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1ebd708f-eb73-5185-8782-cd2ea40c982a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:43f3bf9e-786c-58a9-9241-7ee10307b4f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2009060d-e1e3-578c-b092-a0809ddc92f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:00bb759d-8ec1-5c43-b5cd-301d23edd14d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1635fe49-bb66-57a9-9d87-df6e0dda8f3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:60b1b224-a087-5aaf-8f23-d096de5e3926", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3733caf1-37e5-5317-a913-f328058eb511", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:99fb1b97-1177-52a4-bf06-70b4b9aa4127", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:736980c4-9498-559d-86dc-6e01cbb3e17a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c215f715-c841-5028-bd73-20a06fb26211", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d8e65fd2-cc29-5df7-b448-6afd0cfe0b93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c8b34330-5e67-5a09-a43d-8e65ad2d248f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:71f2e626-0e84-588a-bd96-6b70bead5db7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:680a08f2-649c-5d8f-be18-d78d03354e38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0de5d06f-ffd0-5056-8bba-388eb4d0e948", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0b199b32-272f-5a88-86a8-499af5102234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:350ccb47-1622-549b-88c2-91ce19344489", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c4f0ab8a-b22c-5b4c-a74f-f56bdbc14750", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:faf378e2-9788-5f79-9172-f2b839ba0653", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8f73f27b-2958-5814-80ef-064d32145b1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0fbbbab6-7d86-5c9b-96ab-c3607d7b3300", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:90a02583-b823-52a7-becc-f66ba7c323a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:83a1c4ab-f50f-5ce6-babc-b10e5aed3c10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:73af5293-9439-528d-b95a-9def05057b98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7e980dc9-1f8e-523d-b81d-d740e934e887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7ce03965-0880-5f45-bcdd-dbebe784ba60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ed18feab-f7ab-5fcd-b40f-581485f0c377", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5b06dbd2-e5f0-5b7c-a073-feef0c334e00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c488f896-94bc-5da6-b076-a759c7dd90b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d961fd4d-7c19-5f9d-a784-b62c9c231d90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8c761b2e-02fe-51b4-9b22-100af32afb1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bec9a979-e74f-5060-9006-6f5734d04fb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6f59693c-4d54-539e-b946-cfcb2d34f92b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:57df4db5-829f-5f6d-b910-5e427349fb01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:897d2cd3-c1fc-5b4e-ba3f-0d7f6c18f962", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b33d8269-1cd4-5472-9716-129bcab10f56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.1.5.RELEASE-tuxcare.4" } ] }