{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e8a7f9cc-b8d3-5ab3-b965-afb6e50b4e68", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d47ce1f7-d068-552f-92ce-0854c64f9fd6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2a7dcb21-de71-51a3-b529-66db0dc7d2f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:79319b76-4710-5dc4-879f-96bf3d69f1b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cfdd3a64-3bff-51b6-8dac-b28a93b56588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ece41f3e-6d07-58e4-9541-771b07c728b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b0679b2b-411b-5831-842e-c97bbdac6d46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9494de6a-1477-50fe-a2c7-872d970ad020", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7ec73d9d-b575-5cf8-a9a8-64427a86025c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:73e6fb2a-3a31-5e07-a1b9-49076b4431cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:09f9140d-a052-5945-bf9e-206f5a83a840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0ba797a8-e47a-593a-a22a-0a69dd1fd697", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:97ded960-1605-5089-ab8f-23cc2866f9b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6c5da23e-d473-51fa-b924-d9bd299935b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4311a940-1836-5bf3-8db9-4bf3cb765e8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:21cc2e24-cbb5-5174-8b8a-17ba71828fdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7ba319c6-f8e4-5d56-bb34-b1c554df871a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e4676c26-d8a1-54d7-ae5a-d5452a40d39e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:aa7569dd-a951-5252-97bc-730550314f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5c4427f2-c50c-50e1-b2f8-29d72c41f26d", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jcl 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d361ab36-3a95-50e3-9bc4-e72e3a15fa21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:aede6bc4-dc70-5e42-87be-1495795dcc45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1be7f384-9539-58e0-a8ba-e05ea4b738b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ba5c71fe-2bd7-507a-a466-85af0b6b2a1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bdc2674c-7e97-5bd3-b156-6193a4df405e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e0d314bc-d3be-53da-97f3-6c17b3aab0be", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-jcl 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9df1b4c1-914f-5c9e-b5b3-44e8ae06c672", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cf689a28-d080-527d-a181-355a9528848b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:96fd1783-10a3-5d3c-a06e-ea94336ede9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f7a4064a-ae45-5e04-b152-d2ccc1eaa1ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fcb4692a-898a-5a75-be51-873735b9736e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a3925069-427e-5cd0-af7e-ce7cee7e81e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9c2d8551-4d95-5fb8-8130-8bed79022b50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fc42ef2a-b96d-501c-b90c-3feb30de8af3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:48b34bd9-2c80-5eed-ace7-c6b9028a2e76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3c506880-88d0-5046-ad00-6316171f694b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:90e83893-6221-5699-9604-a03c03a85760", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7f66ff95-174b-5dba-a3b4-41febe198860", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:57b5eeac-3cf9-5f1a-baea-561f32ef183c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e9eac7e0-8304-52fc-af6a-a39f3552d894", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0c97b89f-3f10-58af-88a2-031b2eed8db5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ba39b6fc-9f40-5b01-958c-b58e2b5ee4c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c950aa90-3f2a-59b1-836b-325c9e718fc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9148edb1-a622-5949-8411-f1f843682dbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b7ee5853-b5ca-5835-828c-b67658ffbd12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2c73051b-863b-58e0-be94-c7c02158cc9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:65237c29-8de7-583f-8298-3c31cd080673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:233fd109-5550-50ac-bf0e-9c52e58cdf0a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:36fd8d93-fb05-50e4-bd76-056c76d2e8ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e13ede6c-4a30-5441-945f-887e831c9b67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:345afec0-0625-593d-8b7a-bc52022f27c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f82a94d0-7417-5b8b-bfd3-c30afd5692ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9b6efb12-3280-51c5-897d-1f1b4a6bd81b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6c8d6d44-b00a-5509-9ed9-0ea597b73e23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9ab68fea-f7ac-572d-b851-9daf65808eb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c224a4be-1a97-54c5-ace1-5ee84f65d16c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b27e5dee-4d2e-5fca-b955-932d3c5efa09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4315537d-c58b-591c-a914-c51e97440fb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:215e2eec-7624-5df5-a27a-f72ac386815d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:43ba4003-5d69-5f9c-a697-d1c719344857", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d21e6ba9-00e9-56bf-9205-f95fbd5cf1c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.2.0.RELEASE-tuxcare.5" } ] }