{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b757d13b-9905-59ce-866b-43b74ecc340f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bbd731f0-0572-57a5-9e44-2270f662ce83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e3ea9846-bce9-521e-9d19-c609b82b0e19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:46c39082-08b3-5eec-ab54-f443d3af3d7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d35afe0c-d3f0-522d-89b9-1f3774aeba87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e0e87118-a6de-5717-9f2a-94578592fd13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ecf0ee3c-42e6-51ea-8fa3-1837c73c6c5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:131c80dc-3d92-5789-90f3-76eb01f1589a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:141ea814-e8a8-5fcd-8809-1569228071e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d0e85d4d-57f0-5c07-ba3f-3a85ca1ca985", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7d56255b-0d0a-5999-b7a5-0fb53b2bab7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:37e5307e-b7e2-5c5d-9616-3fb5a0fea171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2b6b49e3-b9e9-59e5-902c-d3bc4bbd31f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:365d8328-c88c-55c3-8c2f-808c205b61f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:115b4995-4681-585f-bbe6-2ae9d5c69e40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f0b7744c-9cff-52e8-a488-4c1bfd64e511", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b26a7e10-c72a-5a75-9fcc-4e2089a48f76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:343c0e8d-db27-556d-846f-f13cedbed20e", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-webmvc 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a2c6232a-abda-59b7-8151-d8c42eb4dbe3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:45d7c25a-1bb3-52d1-a544-216ffac34616", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2c23f0ba-5a0e-5071-ba22-e6e48cd0a4ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:efdaea37-8d15-539c-93c5-99d32cdaef10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f4933286-f6cd-5f77-8e16-790a9d4a03b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f56a9da6-0a53-540e-b61a-74237e6b9ea9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:346c550d-f477-556d-b2d4-e08ca8f9db2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e05e2f02-9b40-56ad-9e76-487d247363b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ec08e500-0622-57e7-94a1-8ac0b2f14063", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:719db675-4c9e-5fd7-bdae-1f5e7958fa87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6a97e1d7-b48a-5913-bc3a-e135c9eea258", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ebcd70de-f5ad-53cc-a862-9e9f2a630230", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:903e444c-0bbe-5154-9655-04c0a8d5f791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:107e151e-8826-5b5f-ba0c-0c03274c87e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6aafbcd1-ee78-5e1b-af36-21104d72efd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:95cb5084-7253-5538-bf1a-e23707cb7aab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:43c944df-f28c-59a6-8b8f-38c448526dbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:10df849e-477c-5ff1-9711-401a27172879", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4c0e641e-7cc8-5803-b4d2-cd3efd64c938", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d2017ee0-d403-5089-9de3-f3e347b5f07c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f282f46c-d3af-5097-bd5f-3c3dfa3f5023", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a9c812a5-c233-5498-93d9-37a3bcd8f668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0307b037-ab58-52ed-99fe-1807c6125b64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6335265f-99e1-5f1b-a89c-81457dbfb290", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d887d081-ffe0-5b30-9282-68df680e8173", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:54c9bb04-0467-5939-a74d-e6b4fb49a9c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:10a3a39c-7f47-5297-a498-2ed342f00763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:67e8e231-edf2-5bab-9cdd-97fae5de675c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:543a3651-cb0e-5b8d-a539-dd469b873aa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1009f3d5-262c-536d-9957-4936b26f5aa0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:787fc630-ca3e-5fca-9ab5-86b98b3c2d1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e48ad3ad-8b99-5dc8-9ec9-61ff8a7691f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5dd54405-658f-5c3e-8197-b05894ea9593", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fa393a53-e443-5f55-9db1-3e6b660dd0be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c0ac0dc2-86c4-5900-a3f5-11c7da9cd298", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a58ddbfd-5582-53ef-832e-6c1353de8cad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cfcc89ce-aa57-5772-854b-770ed4a1dc29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:67e5c115-95ef-5dd9-816c-065b89fa0fed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1293598c-a977-5376-9dce-1f978b9c091a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:28e6e325-8d68-5b58-83c3-63f5e364c1a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c616d722-fd55-5146-88f8-9d884188412e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a30e2f66-28e9-576a-a16a-0afad6df878f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.5.RELEASE-tuxcare.4" } ] }