{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:db2f0379-72b2-5e7a-9b6d-8d42929fa58c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:96d57068-de97-5c82-a8eb-88717306539c", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:959299fc-6d0f-5dff-bfa7-dce87c7f6d84", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18668a02-08c2-5349-a77b-314d988a25fd", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f20b259-63d3-5203-9d00-4db44a61cba2", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a7b576fb-ffdb-5c8f-9081-5bcd75c9da73", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:815bba44-0de5-5e45-a5d0-9b397dc05e27", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:269664e9-f851-594a-aba8-e0fda150cced", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e6c073a-c297-5998-9f51-ed0677930784", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3d3c9c84-e04f-5846-bee7-94460d096064", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de7f8918-f847-5517-aa23-065235583ed2", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:04a29a7d-62fb-54d4-bd12-b260f5f048d3", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:68274880-c270-5caf-8b74-1be86ca3148a", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d1a9be6d-f8c8-562d-8a5e-9852f0813ef4", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:85738c60-ec08-53f7-8570-c2c486e35eaa", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0d1a97c2-0b82-5147-a402-ca7c42fcb659", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3ce57ebd-b627-5ff6-b9d8-b11930e0bab7", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jcl 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e945528a-3e0e-5ef2-a903-7a5d69bb198c", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c40f6ff6-ac8c-5368-b38a-718a797f948b", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:97d5a1fe-0781-516c-80bf-f03f644abb99", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:97501159-dd53-520b-bbef-499d7d064ab4", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c6691b21-f9fb-58b5-b522-d85df3989b2a", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:683cb7f1-4189-5ec5-8232-6acee424ca92", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e39330f4-faf3-5000-9f2d-2ba087140d47", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e0fe35ae-8c00-51e8-a943-16d0ccc34544", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1fa3c83a-c026-5a59-bb51-b3bc73e1f4e5", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0c4bf261-14c2-5701-bcb0-967ed74b6d95", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0ce886ab-3174-5edc-a443-069e81c2b931", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d77b8c6f-bedf-5148-89d0-8019628d762c", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b6732c3-a6f6-586a-8160-277bc086de6d", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9f661ead-86a9-56b2-99df-d7de642cad2f", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6ba5da5e-fa69-5119-83df-5d963ce4fe22", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6a24f93f-fbc4-5475-a995-d0fd8b424ee7", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a58b4215-d866-5340-9bff-a0001515f265", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d29851d4-8d22-5080-8677-4c3bd7655261", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:014fa05f-edfb-5aef-bac8-b9fc36a9e358", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4e0f58a4-e4ae-545d-ac2f-85873601d2b9", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe9ddb15-c83a-55c8-9462-c63dcb418e81", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bcc11e34-b3a0-5783-befc-cac1eabfc4b9", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:edc9cea3-812b-5676-89d9-212723fba210", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:43eaeb7e-91a9-5d61-91cc-da07954097ce", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f4f491a1-4966-50b4-82c9-fc89b506e3c5", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e9a05d57-a0a0-5ef3-a473-a87e33d5f951", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a8b58268-ac42-5060-9138-a47b3167d42e", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:045a210f-6c0b-5137-856d-70e944b81c25", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:791e89ce-3ddc-5d21-885a-d340931ed623", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5f0d9140-00ab-5811-923a-90029c004d09", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e5207241-a854-5a49-a8d7-d0c598c9de9a", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:88e65158-830a-5ed4-ac36-45f80340e2d5", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:72ab0375-39a8-57e3-b369-5bd3f4ba8ec3", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e6155a9d-3070-5c4a-998e-66efdf946c7b", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5d3e3fb4-29da-55d6-8ff5-263c6209cbb2", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d0b5bbcd-18d8-5edb-9b7b-27372533293d", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3cbc4584-4f1b-58fa-8e22-d805c0c493ca", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fa3e1f4a-4c01-5e82-a535-0fbd2b3bc922", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:20d90a2b-744e-5d5b-9cf1-374e0b4bee3e", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.1.20.RELEASE-tuxcare.4" } ] }