{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:68b4fe63-c773-53b1-b133-991c5c22dd64", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-webmvc", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3e436710-e109-59d5-8f43-0b894a909ba5", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:53a7555d-70ec-5fd9-8f7d-77eca73979fa", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40a69c9e-bb06-5139-b320-41ce6002533b", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:23b603e5-5759-52cb-8a5d-b561b651013f", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7296a11d-faff-5bbb-9883-ba70f4b3b43a", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:26937439-9bae-59c0-9462-8c640b4e56b4", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:274650b0-bcf1-5edf-9e5b-bbb8e82c42cb", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3a09e585-e31a-5fa5-a53c-4f5bab495c1e", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:90d56a07-a229-50f8-9c3a-3456763ca3b2", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e1505ed-49da-5db8-860e-bc3ff48ed6b2", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:51597bdc-3f66-521c-ac72-d2cd6d7f3e24", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:564a20a1-58a5-528a-afcc-9d3e88ec1a17", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:707c4385-d0fe-56ce-9723-0a77be056290", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bc536102-4932-504a-92bc-8022aca01977", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c1a5e017-6b25-5c6f-98d3-a65d6531d937", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8c2e3cda-08f8-5e44-9def-6025e7258bb7", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-webmvc 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de599524-56fb-5e2a-a106-7578aeb66782", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:586c42a4-b90a-5aea-89e2-2ff1470709e3", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:95ebaf4f-70a0-5753-9af9-a2b8cdd12650", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e5e8708f-7f71-54fc-9fc3-8a998ccf9eb2", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f4a11dfa-3f00-5c08-8ae5-6e9175733e00", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3a64349e-9cf0-58ab-8572-83c1255578de", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3217c1fa-3874-5b63-81ee-9c4644eb26ba", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d0dbc11f-d53f-52a8-a6f4-4364910fed02", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b851dd6-3848-5d9e-83a1-3e4c0fe69e01", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ebdf6589-4aae-5d5c-bdae-9974848bc369", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f381698e-f376-5b2e-967c-cfb3832bc08d", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f9d5dc36-cc21-58eb-9967-dbc9560d4530", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a42b7ed9-b001-59e4-acd8-92fc6e8d0e83", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7ed82bc0-22fa-5bff-91d7-359f5030db5b", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bcf92069-b3ca-5fcb-9260-9f65aedfa182", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:15a11073-aac5-50bb-8fca-ecdd3decf88f", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:98d40757-f7d3-5490-8ecf-0671a842a300", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:86b3d2b9-3a45-53d9-a3d0-d65ee6736d90", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1d47c495-e263-520e-8752-4c88ce5f3e6c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e2a59a42-76a0-5cbc-912d-b8bd74a9ab7b", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c8914b34-4aad-573e-b215-4bd637af5258", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7b5700ad-9a8a-5c80-bba7-b0d38b40210a", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18f3b3e2-6ebc-50d0-b58b-2e5278af7e59", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:565a5b9f-ccdc-5f10-bd07-97d43aad9e0d", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eda2ce0b-24a6-58b8-aa60-034c04f572cf", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:95d64284-3cb8-5ae3-b146-43c48b158765", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d45e44fd-1aee-52d2-a0a1-2467d2bab534", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e3ac5373-252c-5fac-84d0-721df24d93d6", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4e8e0ef3-5eee-502a-a9f0-da264a92d11f", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:661ebaef-16a1-506c-bea1-244929366662", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c97e60db-7d78-53c4-9855-7f96a7c5ee16", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:835f3a40-97f2-518b-ac6f-aaef70bec4cb", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c3ff3b33-029b-5353-bbf9-cd8d927263b4", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5c822473-73f8-5f7f-8f7d-05f5f55eb8d8", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b27fd0a9-be80-5704-83c0-63fe94227576", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c401df67-9cba-557a-abc2-50545d5f2cc2", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6e93baa6-c869-566b-b233-c6f02b29c5b9", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:feb76e42-cb68-5f30-925e-36bd98908078", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1430c51d-4414-575b-b3ea-bf58dc11f138", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@5.1.20.RELEASE-tuxcare.4" } ] }