{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:eef0c8a2-de1b-5126-934f-6ea281cffc57", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1", "version": "5.3.19-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:37f09be3-2427-5a77-819b-f6741efcfa16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:d6a2acf5-9549-5c4c-abdd-5f9e5960d9c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:591087d7-08b5-55fa-8285-e3c0bd30c4ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0e675a99-a42e-5896-8a27-2afe0b9b0090", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b4beedb2-7b78-5d31-a2b3-1f04fd1c6a07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:3c463fca-948d-515d-bb61-545fe00417bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:53d18d9c-762b-50d8-8184-97fb32432b27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:c250f0b2-6bcb-597b-bbd5-ed50a04bec69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:d9f86f04-948c-5913-b08b-1aedab7e4ac8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:3fe53f9f-3b60-5407-8674-d1356c337e8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:6f5492a0-33a9-54e5-a447-b3681fdec233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2adc2cb9-e02c-507a-b18d-00cc3d5cb08b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b8d05c5e-f628-54d6-a27e-898e646522f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0c577312-b2ee-50f9-bfd9-cfe6cde74fac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:5c315aae-ac12-5a14-a851-4a910edd7432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:1ff76bfc-07e1-5d70-83ab-ee591519fe10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:744b9a6a-842c-5147-a7f4-9d5c48aa4f39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:6bcb69fb-0fdc-5366-8129-7556cff31ad8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:4fb2a013-1f83-54db-bb6a-0e0024536f2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:464c2026-3e68-55f5-ba14-443eb2a0b613", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b4fb4829-35d8-5b55-815a-901278de55f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:d105d8e0-3162-58f3-a5b3-638eadb11968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f3aff1d1-5356-507a-8817-75d5a31014cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f2f9fa58-45b0-50ec-85f1-0bdee7106276", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f8327a49-d10b-596b-8b70-ac7e21912554", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:fa32d0a4-755b-50fe-9643-a637eebd24d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:de401b96-9101-54f8-a2e3-0e0869ee5756", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a84a2768-2c60-588a-8ebb-ffcb0bff30de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:72937b22-4513-5326-b51b-347890ce9cff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:c4d27bdf-65db-58de-8d78-75b8bf65066c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:53a9ec05-e744-54be-aa79-cff5be1756f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:d6e1ae17-800d-5ba4-8c1e-46f6d499af95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:5e345cb5-0687-54c8-84fe-a6a03333e0c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:7659bfac-e52e-5653-bd54-e99e0aed6a68", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.19-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Spring Framework 5.3.19 is not affected by CVE-2026-41847. The vulnerability (filter parameter shadowing in Kotlin Router DSL) was fixed upstream in April 2021 by contributor shindong.lee@riiid.co (commit 07ba95739b). This fix was included in Spring 5.3.19 when it was released in April 2022, over a year after the fix. TuxCare onboarded the already-fixed upstream version in September 2026. Both ...", "justification": "code_not_present" } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:3dac0730-6d1c-5fe3-b6f7-2fe79abea511", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:c24ba5e0-f077-56bd-b207-3b48258885c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:c4fe898f-2486-5022-9fc6-b253e386da8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0e925c98-65f1-52b9-bc49-13bcf563ae6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b3c979fe-a5f6-52cf-bc1b-89e3fc205e72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2b390d02-6875-551a-aeac-7106fc18f219", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:98eefe4d-be3a-5f04-a7b7-c3d5211f0a7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:33963f3c-f4b9-5bdd-b8bb-42bec39df6ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:c61479ea-e3da-55fa-8157-042d3d009eb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:84744980-f423-5c4e-a165-cb0b0f8ad4d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:804d1dcf-0d75-55c2-89a7-76c32aea9405", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:08dad0c1-5296-594a-a781-2e69d9757fa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e5c95584-ef13-5d3b-b4f0-9ee60fe8f775", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:8e52b47d-481e-5f87-8fcb-56e42fd83ec2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:fe4ce917-f684-57ee-90a9-b15a06d5d0f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e1ec14a6-552e-5eaf-85d4-1da95f9bc926", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2fb783ef-16ae-5d9d-989e-54fd7a514f79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:93321493-4a09-5b89-8eee-8e995aed4659", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:6659c10c-c366-5b8f-acff-81913699694b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:815d8f50-2e20-53fe-a22d-d747ca4c1b57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:833e31b2-25ff-5f2b-bd63-7ffab882c18f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.19-tuxcare.1" } ] }