{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fb1e360c-f9ce-5847-a7f9-b1443bd25d8d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:57e92705-cdee-5923-9681-184ff4c31ddd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:18037329-24a2-5dc0-b677-90a465debd88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4902fcf5-6acb-5d7a-8490-9bc69077ffdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:61a5be58-b6b6-53b6-b78f-f81f5f33d5bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:03126917-2d9e-5d94-b7ba-e999eb850291", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:952a6a78-91f3-5fdf-88c0-a13b763668dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a5153918-e9ad-534d-9395-eca96cd50485", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:88d7f2ae-2e09-56b6-9f8c-12e53543a92b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2703eab5-c9f0-57b5-bfad-269db8339bac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fbe96ae1-0cd3-54c6-9d40-7abe89a0dba3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:816a9cc7-ef0b-5c44-915d-94e3fedc5fb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:06c2759f-5d20-5a82-b3b0-2eedf5a69540", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e5e0be25-220b-51dd-9696-e93869099ed2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ab3783d7-edd1-523d-a3ce-1cb9a1affa09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6f50d4e3-082f-5c09-ad47-7e849bc0b69f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:44c44fa6-2db6-5b5c-bdca-2ff4411096ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7092715c-8cc5-5865-a497-9d7e4d85f2eb", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-oxm 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:55b926ef-6795-518a-8bcd-29f79d9b9713", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:472e15c9-2563-55e6-bd50-e3e83acfbc45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8fed5a7c-42ca-52ab-82bc-f7516b90c78c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6ad3c3ee-5905-5104-a4ff-0f9010b6fd4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:873c86bb-3f35-5e2b-9f91-94db5b91c647", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0c9c9995-4478-53f2-886e-dbac51adeeb8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a0f3d63e-12e9-5b38-b428-55b3fe0fce23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:898c71e9-d281-5f5c-b309-ec5c4b49940b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:53ceb271-e2f9-59b6-8195-4d723f42cae0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2fb4a595-bbaa-54cc-8983-1e512691cfe4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:42377e3a-a2f4-56ea-ab83-2553ad670d35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7a117364-6ea8-5202-85a8-039a498ffd7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:69ad27f0-1dec-5d94-9721-c2f9b9eae3cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f0515925-2408-5e07-927a-f00c95f1b046", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8648eda8-f5b0-5cef-a57d-4e70ae874e07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c646c427-0e2e-5281-9a1a-0548091462de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b5dc92c4-7eba-5ffb-ab24-b02da1850813", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:016391cf-e57f-55ae-bcab-e6227b9d76e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:26b3758b-67f9-596c-a36d-de56e587f318", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ecefb912-7a5c-5ba8-a325-3544af938cb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5e52b81e-70f2-5d52-9990-dae3ce890136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1524f0ef-6a42-580e-8cc4-a9c394243501", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ddf6dbf3-831e-51f4-ad73-b0a6c6c58772", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:223eb0be-477d-52ab-8fc1-f5a06f85cd6f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bbeddba1-708c-5442-a0e0-9761fc56c53a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:157b3a76-6981-5a8e-89d0-34d710bc39dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:38c4d2ce-f0c4-5287-b9d4-f5fcf2415e22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3294f28c-93eb-5160-b927-e2bba053ba30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5326c904-470a-5185-ab77-821776d1b3af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c0feb9bb-d154-5f45-be17-c8bde7812fc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7b7aa33c-241a-5a50-8d45-8a752075019e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:42b14cca-b74a-57f6-8510-790461908267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4705d6f8-9e80-5007-9ba0-a19da5a66c42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2555a524-1f29-566d-ba1d-54725c8139c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e9ed174f-65b6-53fc-a7a2-fe0face457fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:18a882b5-57ab-541a-b345-e5ed2d714e86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:90ae7ee6-5cc8-5482-96c1-f0c25afa13e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e622f816-e5b0-570b-a890-d7f2cf35e1b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a2f0212d-14a3-5437-9778-5661918725dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:64484934-8490-597d-ae29-879558c431f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2f9b91dd-fdc8-5d83-98c9-aaee30a3b218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e9ea73aa-f297-54f0-9d76-ebcf067d6342", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.1.5.RELEASE-tuxcare.4" } ] }