{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a7d0a243-74ee-54b8-afa7-6abc0b0917db", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1", "version": "5.3.13-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:0915bb69-cda6-5d78-bd9a-439c0dba02aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:3b86c375-f523-5f46-accd-59752c8f1f6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:48f39295-6a4e-5046-95dc-9cedfb746b29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:477c1f3b-85a1-56a9-8a7d-bad61b8a45ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:419b466a-d26c-518d-af94-5739312f79da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a3fbe3bf-8607-5536-8d17-9090b54ab608", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:4d7fe374-8a76-5d07-b9af-406f73f0e35a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:ae3ccff6-f21c-5012-af5a-6e17630e3b5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:3d0f6183-75f9-5c00-8734-ce08619943a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:890016af-f7ad-5eb4-91a0-deb9aed38fa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:7cedee85-4bbf-5a32-920b-ff0542fce66f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:fe233303-f6f9-530c-8236-d03d3ed54fb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:84340105-ace7-5ea2-9091-46c18e477572", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f2ade3bc-f5e4-5a9d-aca8-2595449ecde0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f1b19036-6b91-5470-bf49-141cd24b11b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:7f9c2908-1392-5717-815b-a91814e8db88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:04f3be46-5ac2-57e2-b2a6-5a968bc300b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:d7d75aaa-a65e-5486-9fa6-fc045d27a777", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.13-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Version 5.3.13 is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() bug in DataBinder's field matching, but version 5.3.13 does not contain the vulnerable code pattern. The CVE-2022-22968 fix (which introduced case-insensitive field matching using toLowerCase()) was never applied to this version, so the locale-dependency issue that CVE-2024-38820 fixes cannot e...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:582473b8-df99-5e05-90a8-64fcd4a31957", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38828 does not affect version 5.3.13-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Spring Framework 5.3.13 is NOT affected by CVE-2024-38828. The vulnerability was introduced by an optimization commit (gh-31834, 0970b1dc7a) on December 13, 2023, which post-dates version 5.3.13 (released November 11, 2021) by over 2 years. Version 5.3.13 properly allocates ContentCachingRequestWrapper's buffer using the contentCacheLimit parameter, never reading request.getContentLength() when...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:aa9ec5a8-7551-51c1-9ab8-0cc4e2b084ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:4592a4c9-43d0-508e-aec8-15a8f9f925af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:cbe876f0-87e3-5fbc-bbb3-b75fd0e249f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a437ee41-6d9c-5ac3-88bd-0799ff3083e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:28fc6266-a2e1-5c8b-909b-5cbfaf4e2372", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:568019a3-d851-50c5-a754-b63587ecb7a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:9eed24a0-88bd-5e1b-b7de-6a2514f243c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:819f8325-e92f-5f39-96b0-37f8b778a136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e6decbb4-56df-5c15-9d76-b981e42da346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:280d41c6-66b5-5f54-8481-321f0ecb7742", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:8f1ce9eb-0aee-5775-961f-5e7043982a0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:54ddd57e-f3f4-5bc6-9a51-fa5783228336", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:73f9fd28-3559-5388-b2eb-19aa95ba9b2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:c6b525fe-411b-52fa-844b-45f8617dd99c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:ddd797a3-7142-5d4f-9439-3c926aef820c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:38b83bf9-9732-5ccd-ba10-f14cd590fc3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:09f05eda-14fd-5520-8720-1b111daed900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f40dd815-af93-586f-b275-e8dc5497a856", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:955211bd-2d00-5b89-a122-d2bf3acd2a83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:82a129ff-f259-5218-9245-66dda18d1798", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:8210be66-319b-5c46-a08e-9291197ac9b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:2b405384-c9ad-5cf3-b50c-03927c956b13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a4321363-7f59-54c8-be31-86089b405a80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1082b392-cf09-554b-b5f1-972c47685bb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:d761f247-2cab-5a92-a812-450a762e3b90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:2865088d-48ac-5d17-829a-5d526dfadb92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:8e9a2178-9b17-5a2c-909e-d48a7bef7519", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f4d49991-ac91-5769-a69e-94769ca2f7bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:0581011a-7047-5eca-9a97-3902098e09c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f5258f55-8c6a-5259-8c17-ab6e3fd9af68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:9b91eaf7-719f-5fc8-b4c6-fb40207fcb4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f5a21326-4a47-53ed-9c98-a342478d261e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:50cd3b39-570d-581a-b76e-b6fdb9047fc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:4571b240-4d44-5c10-83a4-2351c3267a40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:61f71df8-dd56-5d9a-a9fd-951d3c95373f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:72d9ff03-00e9-5bd3-a711-b041b835f118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:8f18de9f-d51f-5e46-b51a-ba9d23ac6646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:db9e8953-eaed-5a65-93c9-99350039eabb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:058ffe84-cc2d-58a0-ab83-61345aebd7a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:ec2ac1a7-b9f6-5aff-94d6-5658eac9eda7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.13-tuxcare.1" } ] }