{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f5e59de1-a721-52fd-9b15-ddbec21d8ecc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2", "version": "5.3.6-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:3dd1bf4f-890e-50f3-8674-2bae7f3a22f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:9dae2cfc-60d1-588f-b520-830937a06c56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:65ff1eec-edca-5294-b4b2-98cb98122249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:8f7f7533-46a2-52b9-acf3-9c0e5f000292", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:3f05e911-cceb-5ce1-a0c4-923516456ae0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:88fd6068-4b91-53da-836b-6c2e862bd337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:72db2702-4e44-5f9a-a7ac-3ee1d24a66df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:731dc51b-8373-577b-af74-66e493d95bee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e6734fee-f0d2-5629-a6e1-c21439d3cc96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:8645b45a-0521-5640-8eb1-8ea7ac9e2749", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:d67449ff-8ade-5944-a7d4-8542abe1786c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:bc991266-c7c0-5bd0-b3af-7b54adcbaf76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:1ffa6a81-103f-5b0f-8910-b0abf50812e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:896862c7-6240-50f5-91fa-951805f7a5a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:2a0bef46-fd04-544a-8074-b559c577809c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:d5284145-c752-527f-9c9a-efcf7a8e9f64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:33e570a6-a744-5f66-9bfc-b6d0ed5efabf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:29424536-d07c-568f-bb1d-3781895cd264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:be8dc3d2-c5e8-520d-9dd6-412709875bd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:d708273a-8f63-5865-8a32-9a038b497d87", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.6-tuxcare.2 of org.springframework:spring-test. not_affected \u2014 Spring Framework 5.3.6 is not affected by CVE-2024-38820. The vulnerability concerns locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, which was introduced by the CVE-2022-22968 fix in version 5.3.7. Version 5.3.6 predates this fix and performs case-sensitive field name matching only, without any toLowerCase() calls in the affected code paths.", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:32fa3cfe-a8e6-5d62-a48d-62b87b09b3be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:027a2c15-2ce9-54a4-94d9-6c818b2969d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:ca16d017-c647-5db3-aa2e-5d393317c50f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:dccf72b6-4d1d-5a06-b8e7-7795eb6710be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:7713a7b0-7c92-53d5-80f8-802436dba067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:da951470-1df3-5c72-b0cd-c394442b98a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:3033ae96-47df-5e73-b29c-66ba613954a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:ece0d912-a633-57fe-bece-3b14f4386bf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a3b49dc6-15d4-5514-a73a-d5e2c7db40eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:f5c9fb57-a775-5061-a2e8-05bab4c95382", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:ce0abf52-6707-5ef3-b1d9-99398a97ed59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a5eb942d-2b96-52f6-af77-b3fa12dfeb3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e22eacf1-72c0-506d-a21a-3e56aa8c8540", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6c4be59e-257d-5a3d-9d0a-e6d612bd1f22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:99e459da-ed5d-544c-8d98-4c09b5182d31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:83969138-40d4-5c39-8107-bd9ca1544766", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:5e26912a-f449-5763-8ce0-53f2a9117eed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:46318efa-40db-506d-b050-4f377e972a1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6b4c7481-a348-5445-8bdf-db86df95f387", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e155d4a2-19c6-5a6f-8c49-466c13f8ea86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:ef06ac9c-c374-53de-983c-b4beee0260a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:443b24dc-1c2c-521e-aa28-6458f7264d36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:c8b6a8bd-f3e4-57db-ba1d-77bb2ccdcf52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:7fba47f3-1074-5cd8-81c7-c60ef3e5b6fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:30721e7c-0e31-5bfe-ad5f-065d2537c3ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:1ad2246c-3330-53a8-be99-e8a4792eb0dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:50db2d12-cd4c-5c3e-a9ae-9c0924f427cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:684681a5-81ab-5d9f-a373-367cfa7bf42e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:88dbf89c-528e-5167-903f-e1a820159be3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e25c3071-79b3-578e-8ec1-cc6f0ebf4fdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b6d6e585-ebaa-5459-8eb6-b867f05cbcea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:0f65e627-ed5f-59d1-925e-3f5feec901c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:ab7c6d22-f210-54fb-98f6-e4371b1cc0f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:080dff02-dd55-596e-b804-4192e3b1f77f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:8055f5aa-db9b-59da-a270-48714cf59c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:d1891d29-4b56-5ca5-b976-c20ffb69b9ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:18f65e47-bbde-510a-9586-b318c093cf39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:df3c363b-6a32-564c-a1a7-231d8e8b0af7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:c1b91c7a-4c12-587e-8746-4e8669acbf80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:3e8254ba-ab43-56a8-8bd4-15b58fbdb8d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ], "bom-ref": "urn:uuid:55ace153-1c02-5c72-8ced-2e37352265c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.6-tuxcare.2" } ] }