{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c2b5e592-4cb5-579e-a6be-547fc2b102f2", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:88d9f5d1-6f65-5e87-b25c-75f95eff1914", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:17979519-cf58-56ef-b62b-8908f97a7176", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1ae585c1-f782-5646-acbf-5dd9a3264e34", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bebffabc-9176-5405-b757-c3bd32f83c43", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c1b538d6-96a0-523c-8f3e-aeac3e92aad4", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:323269a3-a387-5465-875b-7fc3e52f6449", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:509d0330-6d92-5541-9d79-8a6762bbb482", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:054dae77-e46b-54da-ad25-a814d06c14b4", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c3346a36-6a62-5242-9f24-b1f150fe880e", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dae9a096-0ae6-5e55-82d1-2cdda513fd10", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3adb0c7a-2282-547f-aaec-23eab304bdeb", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:91486edd-7a34-59aa-b72b-234ad4aded86", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:43345f34-43e0-50f7-af4c-02ed1843f2df", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a1b40753-a91a-51b4-bd0f-ec0ba9de2719", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:111ae0e0-9023-5f1a-b203-aee9806fda29", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a1c777a2-d33a-5551-8233-c4b8825f8564", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context-support 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0f8f2de4-c40a-538a-96ba-d1b0ef76a9c2", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5d71e353-4dad-5d11-8e26-4e8360679584", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c7a46950-40c0-5681-968d-0a2cc643970e", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:09775268-542a-5eff-8570-2923cf030c8e", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5492020e-d0f9-5310-af59-b1ae13a1f6b9", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:043bbd3e-0522-5ae3-84f5-0037eb2f0d38", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:47fa6269-c16c-5e6f-b5b7-d0c81f92acd7", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eccde30e-7d5c-5287-9039-bd7fff8cf28e", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d0419d6f-6c32-5f23-9a6c-8891614ced52", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2f0b0fd2-e3ec-51b8-93f4-5e757d360dfb", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:07205ec4-e6c9-596e-ab8b-a55413a1ac05", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bcf5b388-6585-526e-b416-ddb496cd57c2", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:54f3ba95-8c32-5bd9-b0c8-5b55b4da54b7", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:990606de-e353-59d2-a0e1-cba3d8c135d3", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6e6d2923-cbc1-57c5-9f3a-f9c21f28b8a3", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8c3f15b8-44e0-555b-819d-bb7eaa1fcc7a", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1505ca64-c141-5603-9b94-835a67351912", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:148d4221-02ab-5b59-a51d-08a0bfe001cf", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3e9248c9-7b56-5b25-8473-71b801ea2bc3", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4fb84429-e76b-5d22-bde4-20897c3d6321", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5025bc16-bf9a-5c66-87fa-f4b3a3353401", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:14061baf-c0bb-5e82-8b18-e8ab03fd9364", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:446d462f-3fe5-5164-bd46-d7ba245aa894", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:44423fea-1b11-572f-8a74-711c1a5d5146", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a2f64a93-7146-590d-943d-874640ef23ef", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:62745cf8-6f19-546c-b65d-9900d13a8671", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2acab106-45ae-5ac7-8452-5eff1762e69c", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:48d80317-ae84-528b-919b-1eeeb76d6e55", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5e43b2d8-591b-5a1e-bb10-ab1edbda8a08", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c65b6334-2c13-5aa8-ba91-bcfa894d6ff8", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f3fd6e9b-4f6c-51c2-832f-5d382f8d819d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2b7c7398-e464-57fa-9885-938476d523e4", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:482bd8c4-ad8f-55e9-bc9c-0f939a7deacc", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3f24bcfb-1d7a-5439-af41-3b26f12f2696", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cd679f14-8233-56ef-a348-51ec89d0d39b", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e364bea6-a59c-5928-828a-a0097ee4efee", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:56d1d89f-f9e6-5609-99ed-6ce79c0428c4", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:55559467-e1e2-5178-9194-059ebf03d6cd", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c1a4d7a5-f75f-5094-9754-000326e3a25a", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.1.20.RELEASE-tuxcare.4" } ] }