{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cd671c61-03d4-576a-9d80-9efd09c0845c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:88837a41-053e-50bc-ba9a-9b4497d77aa1", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1c7a17bb-08c9-50c9-ae1e-99d82b12b3ab", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:05887013-4e44-5ce1-895f-5af889517b4f", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:915b5cb1-6e8f-5ca3-817f-6e8a9498774d", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:28fa9dad-4f16-5678-9610-3003c627f9d1", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:95e5ef74-e081-573b-a142-6e849389f275", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ecad0788-8d62-527f-b12f-9cae4009ae28", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7cd12866-6b17-5eba-bdf2-34a715ce169d", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe029575-a5bc-5674-b99d-d651bf7e3ae8", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7972eb18-5126-5f3e-8609-eda2a0b201d7", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:14286816-9e1b-51a9-be85-7b6475dab065", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b66353da-56de-5c0c-b353-fd9fbee804c0", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9b48c16c-6104-59ef-a34b-7af5f25c53c0", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c34d91cf-4838-5235-b6ad-e9f4b6a1f55c", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a465e5bf-7d82-55a2-b084-f2f3774c68cc", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c328cc32-72e0-5ec1-a33c-be3e6181def5", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-beans 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:10305e70-93b1-540e-ac0a-5087890081ed", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:54c26d1f-4031-58d6-a044-139ad4cc7906", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4269cf84-c9ea-5c55-8556-64a20794d38d", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe45d703-114c-5d84-a7ea-b28d6dd0801b", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:448f2836-a920-5edd-9c96-000dc946dfe9", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e568c15-3d20-5ca8-bf1b-c35dd9d80ac1", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bdb5b476-4845-58ad-b791-54c84fd3dfc1", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1f498c73-c852-5687-9931-5137639ea3ad", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:638e8748-2f45-517e-a746-3c5aa650535f", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3bc31e63-adbc-5da4-ac52-1fd55ab3fabc", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:43a3538e-e9e0-5cdc-b012-889a5a980033", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e117d96-93c0-5d34-ad34-a8ea32b22f81", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1e558f1c-803f-5a84-8ee2-a59bcc7f54fe", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ce2f8009-37b6-506f-999f-b933cf3a2813", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e3705520-f310-59d8-9aad-5f3087b8bf8c", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:69479e62-03ed-5548-ad72-fcb6c4715755", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:19c99383-1a00-52ea-9b4a-2a6311911e4f", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:498546f7-dab0-5893-82e0-6dd8bb573cb2", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d389c18d-eed4-57b8-b8f9-a93fd694854c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5e0b6519-b216-5762-aea5-66bf7c2d1833", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2354bf6d-4bb4-55c3-9db1-70740061bfac", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d108ebe3-36ff-58d0-b21e-be0a00ea70f3", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1b839f8f-2466-5e81-aa0c-7bb69ae97310", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ca4638de-039e-5ff1-9e91-a9db69553978", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7c2d7f20-0f0c-57b1-9ccb-1bbc40a0527f", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1f84fee3-aa7c-57a6-bead-a7226c749c66", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e576437c-3b30-539c-b290-b5a39234bce3", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:29fc9e46-234d-55bc-a3d0-875faa105464", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7d7c1feb-5b0f-56b1-bfaa-3d722741d096", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9ae3d885-9e0b-5d99-b73a-8438430e6fd2", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d6cfd66e-36a6-57f2-8839-926c92e5911d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fa892275-f2f7-5093-8f5b-9a1586596e78", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:71146b69-d120-5506-8456-0ff6830d3383", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f6026dd0-d6da-5ef3-b4ef-0b1fb4185775", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c6280ad3-f8a7-539f-b8ef-8458e062b1df", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:69ff79cf-0273-58c8-a925-cd38217dd265", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:275904f6-bb90-50f2-a4f8-ec5a23c97951", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6dbd2138-820e-5f9c-96ea-2c61aa0938c2", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5f42ee2e-542f-528a-93cb-3ace3e980ba4", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.1.20.RELEASE-tuxcare.4" } ] }