{"id":"CVE-2026-41838","aliases":["CLSA-2026-1781484854","CLSA-2026-1781571271","CLSA-2026-1781657705","CLSA-2026-1782781166","CLSA-2026-1783299707","CLSA-2026-1783386123","CLSA-2026-1783645384","CLSA-2026-1783645402","CLSA-2026-1784164100","CLSA-2026-1784509763","CLSA-2026-1784509765","CLSA-2026-1784509766","CLSA-2026-1785727936","CLSA-2026-1785815205","CLSA-2026-1785939604","CLSA-2026-1785946854","CLSA-2026-1785952964","CLSA-2026-1785957138","CLSA-2026-1785958008","CLSA-2026-1785959911","CLSA-2026-1786515016","CLSA-2026-1786609421","CLSA-2026-1786623881","CLSA-2026-1786717612","CLSA-2026-1787148952","CLSA-2026-1787205684","CLSA-2026-1787311912","CLSA-2026-1787313469","CLSA-2026-1787317539","CLSA-2026-1787559106","CLSA-2026-1787726627","CLSA-2026-1787726639","CLSA-2026-1787728788","CLSA-2026-1787732821","CLSA-2026-1788253370","CLSA-2026-1788341776","CLSA-2026-1788344824","CLSA-2026-1788344832","CLSA-2026-1788346056","CLSA-2026-1788360559","CLSA-2026-1788372470","CLSA-2026-1788372833","CLSA-2026-1789380988","CLSA-2026-1789722420","CLSA-2026-1790068633","CLSA-2026-1790068772","CLSA-2026-1790069660","CLSA-2026-1790069975","CLSA-2026-1790070167","CLSA-2026-1790070464","CLSA-2026-1790070671","CLSA-2026-1790071189","CLSA-2026-1790074038","CLSA-2026-1790079815","CLSA-2026-1790089638","CLSA-2026-1790157664","CLSA-2026-1790161647","CLSA-2026-1790174512","CLSA-2026-1790878884","CLSA-2026-1791107509","CLSA-2026-1791213084","CLSA-2026-1791218458","CLSA-2026-1791218487","CLSA-2026-1791289094","CLSA-2026-1791463722","CLSA-2026-1791464212","CLSA-2026-1792575333","CLSA-2026-1792590655","CLSA-2026-1792590675","CLSA-2026-1792590787","CLSA-2026-1792591113","CLSA-2026-1793615948","CLSA-2026-1793618191","CLSA-2026-1793624923","CLSA-2026-1793635118","CLSA-2026-1793636127","CLSA-2026-1793636640","CLSA-2026-1793637145","CLSA-2026-1793640360","CLSA-2026-1793884738","CLSA-2026-1793897475","CLSA-2026-1794178070","CLSA-2026-1794238635","DEBIAN-CVE-2026-41838","EUVD-2026-35325","GHSA-q723-847q-5g8g","RHLW-2026-f2c01667a278f77c","UBUNTU-CVE-2026-41838"],"status":"published","title":"Spring Framework Predictable Session ID in WebSocket Module","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00171,"percentile":0.06541,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-330"],"published":"2026-06-09T03:49:15Z","modified":"2026-11-10T02:45:36Z","fixes":[{"ecosystem":"Maven","package":"org.springframework:spring-websocket","fixed_in":["7.0.8","6.2.19"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","fixed_in":["5.2.13.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.9"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"last_affected":"7.0.7"},{"fixed":"7.0.8"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"last_affected":"6.2.18"},{"fixed":"6.2.19"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"last_affected":"6.1.27"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.3.48"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.5"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.5"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.5"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.5"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.5"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.20"},{"fixed":"6.1.20-tuxcare.5"}]}],"versions":["6.1.20","6.1.20-tuxcare.1","6.1.20-tuxcare.2","6.1.20-tuxcare.3","6.1.20-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.7"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.7"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.7"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.7"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.7"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.7"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.21"},{"fixed":"6.1.21-tuxcare.7"}]}],"versions":["6.1.21","6.1.21-tuxcare.1","6.1.21-tuxcare.2","6.1.21-tuxcare.3","6.1.21-tuxcare.4","6.1.21-tuxcare.5","6.1.21-tuxcare.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.13"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.13"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.13"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.13"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.39"},{"fixed":"5.3.39-tuxcare.13"}]}],"versions":["5.3.39","5.3.39-tuxcare.10","5.3.39-tuxcare.11","5.3.39-tuxcare.12","5.3.39-tuxcare.7","5.3.39-tuxcare.8","5.3.39-tuxcare.9","5.3.39.tuxcare.1","5.3.39.tuxcare.3","5.3.39.tuxcare.4","5.3.39.tuxcare.5","5.3.39.tuxcare.6"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.7"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.7"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.7"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.37"},{"fixed":"5.3.37-tuxcare.7"}]}],"versions":["5.3.37","5.3.37-tuxcare.1","5.3.37-tuxcare.2","5.3.37-tuxcare.3","5.3.37-tuxcare.4","5.3.37-tuxcare.5","5.3.37-tuxcare.6"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.4"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.4"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.7"},{"fixed":"5.3.7-tuxcare.4"}]}],"versions":["5.3.7","5.3.7-tuxcare.1","5.3.7-tuxcare.2","5.3.7-tuxcare.3"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.6"}]}],"versions":["5.3.31","5.3.31-tuxcare.1","5.3.31-tuxcare.2","5.3.31-tuxcare.3","5.3.31-tuxcare.4","5.3.31-tuxcare.5","5.3.31.tuxcare"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.31"},{"fixed":"5.3.31-tuxcare.6"}]}],"versions":["5.3.31","5.3.31-tuxcare.1","5.3.31-tuxcare.2","5.3.31-tuxcare.3","5.3.31-tuxcare.4","5.3.31-tuxcare.5","5.3.31.tuxcare"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.4"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.4"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.4"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.25"},{"fixed":"5.3.25-tuxcare.4"}]}],"versions":["5.3.25","5.3.25-tuxcare.1","5.3.25-tuxcare.2","5.3.25-tuxcare.3"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.13.RELEASE"},{"fixed":"5.2.13.RELEASE-tuxcare.6"}]}],"versions":["5.2.13.RELEASE","5.2.13.RELEASE-tuxcare.1","5.2.13.RELEASE-tuxcare.2","5.2.13.RELEASE-tuxcare.3","5.2.13.RELEASE-tuxcare.4","5.2.13.RELEASE-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.3"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.3"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.3"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.20.RELEASE"},{"fixed":"5.1.20.RELEASE-tuxcare.3"}]}],"versions":["5.1.20.RELEASE","5.1.20.RELEASE-tuxcare.1","5.1.20.RELEASE-tuxcare.2"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27-tuxcare.6"}]}],"versions":["5.3.27","5.3.27-tuxcare.2","5.3.27-tuxcare.3","5.3.27-tuxcare.4","5.3.27-tuxcare.5","5.3.27.tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27-tuxcare.6"}]}],"versions":["5.3.27","5.3.27-tuxcare.2","5.3.27-tuxcare.3","5.3.27-tuxcare.4","5.3.27-tuxcare.5","5.3.27.tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27-tuxcare.6"}]}],"versions":["5.3.27","5.3.27-tuxcare.2","5.3.27-tuxcare.3","5.3.27-tuxcare.4","5.3.27-tuxcare.5","5.3.27.tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.27"},{"fixed":"5.3.27-tuxcare.6"}]}],"versions":["5.3.27","5.3.27-tuxcare.2","5.3.27-tuxcare.3","5.3.27-tuxcare.4","5.3.27-tuxcare.5","5.3.27.tuxcare.1"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.4"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.4"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.4"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.24"},{"fixed":"5.3.24-tuxcare.4"}]}],"versions":["5.3.24","5.3.24-tuxcare.1","5.3.24-tuxcare.2","5.3.24-tuxcare.3"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.5"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.5"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.5"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.29"},{"fixed":"5.3.29-tuxcare.5"}]}],"versions":["5.3.29","5.3.29-tuxcare.1","5.3.29-tuxcare.2","5.3.29-tuxcare.3","5.3.29-tuxcare.4"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.1"}]}],"versions":["6.1.7"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.1"}]}],"versions":["6.1.7"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.1"}]}],"versions":["6.1.7"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.7"},{"fixed":"6.1.7-tuxcare.1"}]}],"versions":["6.1.7"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-framework-bom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.6.RELEASE"},{"fixed":"5.1.6.RELEASE-tuxcare.2"}]}],"versions":["5.1.6.RELEASE","5.1.6.RELEASE-tuxcare.1"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.5"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.5"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.5"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.5"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.5"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.30"},{"fixed":"5.3.30-tuxcare.5"}]}],"versions":["5.3.30","5.3.30-tuxcare.1","5.3.30-tuxcare.2","5.3.30-tuxcare.3","5.3.30-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.3"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1","5.1.9.RELEASE-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.3"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1","5.1.9.RELEASE-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.9.RELEASE"},{"fixed":"5.1.9.RELEASE-tuxcare.3"}]}],"versions":["5.1.9.RELEASE","5.1.9.RELEASE-tuxcare.1","5.1.9.RELEASE-tuxcare.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.3"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.3"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.3"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.3"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.15"},{"fixed":"6.2.15-tuxcare.3"}]}],"versions":["6.2.15","6.2.15-tuxcare.1","6.2.15-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.13.RELEASE"},{"fixed":"5.0.13.RELEASE-tuxcare.2"}]}],"versions":["5.0.13.RELEASE","5.0.13.RELEASE-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.1"}]}],"versions":["6.1.15"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.1"}]}],"versions":["6.1.15"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.1"}]}],"versions":["6.1.15"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.1"}]}],"versions":["6.1.15"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.1"}]}],"versions":["6.1.15"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.15"},{"fixed":"6.1.15-tuxcare.1"}]}],"versions":["6.1.15"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.5.RELEASE"},{"fixed":"5.0.5.RELEASE-tuxcare.3"}]}],"versions":["5.0.5.RELEASE","5.0.5.RELEASE-tuxcare.1","5.0.5.RELEASE-tuxcare.2"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.1"},{"fixed":"6.2.1-tuxcare.1"}]}],"versions":["6.2.1"],"bundled":17},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.5"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.5"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.5"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.5"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.16"},{"fixed":"6.0.16-tuxcare.5"}]}],"versions":["6.0.16","6.0.16-tuxcare.1","6.0.16-tuxcare.2","6.0.16-tuxcare.3","6.0.16-tuxcare.4"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.5"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.5"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.5"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.5"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.23"},{"fixed":"6.0.23-tuxcare.5"}]}],"versions":["6.0.23","6.0.23-tuxcare.1","6.0.23-tuxcare.2","6.0.23-tuxcare.3","6.0.23-tuxcare.4"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.2"}]}],"versions":["6.1.16","6.1.16-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.2"}]}],"versions":["6.1.16","6.1.16-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.2"}]}],"versions":["6.1.16","6.1.16-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.2"}]}],"versions":["6.1.16","6.1.16-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.2"}]}],"versions":["6.1.16","6.1.16-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.2"}]}],"versions":["6.1.16","6.1.16-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.16"},{"fixed":"6.1.16-tuxcare.2"}]}],"versions":["6.1.16","6.1.16-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.1"}]}],"versions":["6.1.19"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.1"}]}],"versions":["6.1.19"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.1"}]}],"versions":["6.1.19"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.1"}]}],"versions":["6.1.19"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.1"}]}],"versions":["6.1.19"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.1"}]}],"versions":["6.1.19"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.19"},{"fixed":"6.1.19-tuxcare.1"}]}],"versions":["6.1.19"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.7"}]}],"versions":["4.3.30.RELEASE","4.3.30.RELEASE-tuxcare.1","4.3.30.RELEASE-tuxcare.2","4.3.30.RELEASE-tuxcare.3","4.3.30.RELEASE-tuxcare.4","4.3.30.RELEASE-tuxcare.5","4.3.30.RELEASE-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.30.RELEASE"},{"fixed":"4.3.30.RELEASE-tuxcare.7"}]}],"versions":["4.3.30.RELEASE","4.3.30.RELEASE-tuxcare.1","4.3.30.RELEASE-tuxcare.2","4.3.30.RELEASE-tuxcare.3","4.3.30.RELEASE-tuxcare.4","4.3.30.RELEASE-tuxcare.5","4.3.30.RELEASE-tuxcare.6"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.4.RELEASE"},{"fixed":"4.3.4.RELEASE-tuxcare.3"}]}],"versions":["4.3.4.RELEASE","4.3.4.RELEASE-tuxcare.1","4.3.4.RELEASE-tuxcare.2"],"bundled":7},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.6"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2","4.1.7.RELEASE-tuxcare.3","4.1.7.RELEASE-tuxcare.4","4.1.7.RELEASE-tuxcare.5"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.6"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2","4.1.7.RELEASE-tuxcare.3","4.1.7.RELEASE-tuxcare.4","4.1.7.RELEASE-tuxcare.5"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.6"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2","4.1.7.RELEASE-tuxcare.3","4.1.7.RELEASE-tuxcare.4","4.1.7.RELEASE-tuxcare.5"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.6"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2","4.1.7.RELEASE-tuxcare.3","4.1.7.RELEASE-tuxcare.4","4.1.7.RELEASE-tuxcare.5"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.7.RELEASE"},{"fixed":"4.1.7.RELEASE-tuxcare.6"}]}],"versions":["4.1.7.RELEASE","4.1.7.RELEASE-tuxcare.1","4.1.7.RELEASE-tuxcare.2","4.1.7.RELEASE-tuxcare.3","4.1.7.RELEASE-tuxcare.4","4.1.7.RELEASE-tuxcare.5"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.9.RELEASE"},{"fixed":"4.2.9.RELEASE-tuxcare.9"}]}],"versions":["4.2.9.RELEASE","4.2.9.RELEASE-tuxcare.1","4.2.9.RELEASE-tuxcare.2","4.2.9.RELEASE-tuxcare.3","4.2.9.RELEASE-tuxcare.4","4.2.9.RELEASE-tuxcare.5","4.2.9.RELEASE-tuxcare.6","4.2.9.RELEASE-tuxcare.7","4.2.9.RELEASE-tuxcare.8"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.1"}]}],"versions":["6.1.13"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.1"}]}],"versions":["6.1.13"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.1"}]}],"versions":["6.1.13"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.1"}]}],"versions":["6.1.13"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.13"},{"fixed":"6.1.13-tuxcare.1"}]}],"versions":["6.1.13"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.4"},{"fixed":"6.1.4-tuxcare.1"}]}],"versions":["6.1.4"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.1"}]}],"versions":["6.2.13"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.1"}]}],"versions":["6.2.13"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.1"}]}],"versions":["6.2.13"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.1"}]}],"versions":["6.2.13"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.13"},{"fixed":"6.2.13-tuxcare.1"}]}],"versions":["6.2.13"],"bundled":9},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.25.RELEASE"},{"fixed":"4.3.25.RELEASE-tuxcare.4"}]}],"versions":["4.3.25.RELEASE","4.3.25.RELEASE-tuxcare.1","4.3.25.RELEASE-tuxcare.2","4.3.25.RELEASE-tuxcare.3"],"bundled":6},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-context-support","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.14"},{"fixed":"6.1.14-tuxcare.1"}]}],"versions":["6.1.14"],"bundled":32},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.9.RELEASE"},{"fixed":"4.3.9.RELEASE-tuxcare.4"}]}],"versions":["4.3.9.RELEASE","4.3.9.RELEASE-tuxcare.1","4.3.9.RELEASE-tuxcare.2","4.3.9.RELEASE-tuxcare.3"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.1"}]}],"versions":["6.0.13"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.1"}]}],"versions":["6.0.13"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.1"}]}],"versions":["6.0.13"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.1"}]}],"versions":["6.0.13"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.1"}]}],"versions":["6.0.13"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.13"},{"fixed":"6.0.13-tuxcare.1"}]}],"versions":["6.0.13"],"bundled":27},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.1"}]}],"versions":["6.0.15"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.1"}]}],"versions":["6.0.15"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.1"}]}],"versions":["6.0.15"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.1"}]}],"versions":["6.0.15"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.1"}]}],"versions":["6.0.15"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.15"},{"fixed":"6.0.15-tuxcare.1"}]}],"versions":["6.0.15"],"bundled":28},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.1"}]}],"versions":["6.0.11"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.1"}]}],"versions":["6.0.11"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.1"}]}],"versions":["6.0.11"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webflux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.1"}]}],"versions":["6.0.11"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-webmvc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.1"}]}],"versions":["6.0.11"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.11"},{"fixed":"6.0.11-tuxcare.1"}]}],"versions":["6.0.11"],"bundled":23},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-beans","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-expression","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework:spring-messaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.21"},{"fixed":"5.3.21-tuxcare.1"}]}],"versions":["5.3.21"],"bundled":29},{"source":"osv","ecosystem":"Debian:12","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-3","4.3.30-4"]},{"source":"osv","ecosystem":"Debian:13","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4"]},{"source":"osv","ecosystem":"Debian:14","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3","4.3.30-4"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.0.8"}]}],"versions":["7.0.0","7.0.1","7.0.2","7.0.3","7.0.4","7.0.5","7.0.6","7.0.7"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.2.19"}]}],"versions":["6.2.0","6.2.1","6.2.10","6.2.11","6.2.12","6.2.13","6.2.14","6.2.15","6.2.16","6.2.17","6.2.18","6.2.2","6.2.3","6.2.4","6.2.5","6.2.6","6.2.7","6.2.8","6.2.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"last_affected":"6.1.27"}]}],"versions":["6.1.0","6.1.1","6.1.10","6.1.11","6.1.12","6.1.13","6.1.14","6.1.15","6.1.16","6.1.17","6.1.18","6.1.19","6.1.2","6.1.20","6.1.21","6.1.3","6.1.4","6.1.5","6.1.6","6.1.7","6.1.8","6.1.9"]},{"source":"osv","ecosystem":"Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.3.48"}]}],"versions":["4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.19","5.3.2","5.3.20","5.3.21","5.3.22","5.3.23","5.3.24","5.3.25","5.3.26","5.3.27","5.3.28","5.3.29","5.3.3","5.3.30","5.3.31","5.3.32","5.3.33","5.3.34","5.3.35","5.3.36","5.3.37","5.3.38","5.3.39","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.springframework:spring-websocket","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.18.rhlw-00010"}]}],"versions":["4.0.0.RELEASE","4.0.1.RELEASE","4.0.2.RELEASE","4.0.3.RELEASE","4.0.4.RELEASE","4.0.5.RELEASE","4.0.6.RELEASE","4.0.7.RELEASE","4.0.8.RELEASE","4.0.9.RELEASE","4.1.0.RELEASE","4.1.1.RELEASE","4.1.2.RELEASE","4.1.3.RELEASE","4.1.4.RELEASE","4.1.5.RELEASE","4.1.6.RELEASE","4.1.7.RELEASE","4.1.8.RELEASE","4.1.9.RELEASE","4.2.0.RELEASE","4.2.1.RELEASE","4.2.2.RELEASE","4.2.3.RELEASE","4.2.4.RELEASE","4.2.5.RELEASE","4.2.6.RELEASE","4.2.7.RELEASE","4.2.8.RELEASE","4.2.9.RELEASE","4.3.0.RELEASE","4.3.1.RELEASE","4.3.10.RELEASE","4.3.11.RELEASE","4.3.12.RELEASE","4.3.13.RELEASE","4.3.14.RELEASE","4.3.15.RELEASE","4.3.16.RELEASE","4.3.17.RELEASE","4.3.18.RELEASE","4.3.19.RELEASE","4.3.2.RELEASE","4.3.20.RELEASE","4.3.21.RELEASE","4.3.22.RELEASE","4.3.23.RELEASE","4.3.24.RELEASE","4.3.25.RELEASE","4.3.26.RELEASE","4.3.27.RELEASE","4.3.28.RELEASE","4.3.29.RELEASE","4.3.3.RELEASE","4.3.30.RELEASE","4.3.4.RELEASE","4.3.5.RELEASE","4.3.6.RELEASE","4.3.7.RELEASE","4.3.8.RELEASE","4.3.9.RELEASE","5.0.0.RELEASE","5.0.1.RELEASE","5.0.10.RELEASE","5.0.11.RELEASE","5.0.12.RELEASE","5.0.13.RELEASE","5.0.14.RELEASE","5.0.15.RELEASE","5.0.16.RELEASE","5.0.17.RELEASE","5.0.18.RELEASE","5.0.19.RELEASE","5.0.2.RELEASE","5.0.20.RELEASE","5.0.3.RELEASE","5.0.4.RELEASE","5.0.5.RELEASE","5.0.6.RELEASE","5.0.7.RELEASE","5.0.8.RELEASE","5.0.9.RELEASE","5.1.0.RELEASE","5.1.1.RELEASE","5.1.10.RELEASE","5.1.11.RELEASE","5.1.12.RELEASE","5.1.13.RELEASE","5.1.14.RELEASE","5.1.15.RELEASE","5.1.16.RELEASE","5.1.17.RELEASE","5.1.18.RELEASE","5.1.19.RELEASE","5.1.2.RELEASE","5.1.20.RELEASE","5.1.3.RELEASE","5.1.4.RELEASE","5.1.5.RELEASE","5.1.6.RELEASE","5.1.7.RELEASE","5.1.8.RELEASE","5.1.9.RELEASE","5.2.0.RELEASE","5.2.1.RELEASE","5.2.10.RELEASE","5.2.11.RELEASE","5.2.12.RELEASE","5.2.13.RELEASE","5.2.14.RELEASE","5.2.15.RELEASE","5.2.16.RELEASE","5.2.17.RELEASE","5.2.18.RELEASE","5.2.19.RELEASE","5.2.2.RELEASE","5.2.20.RELEASE","5.2.21.RELEASE","5.2.22.RELEASE","5.2.23.RELEASE","5.2.24.RELEASE","5.2.25.RELEASE","5.2.3.RELEASE","5.2.4.RELEASE","5.2.5.RELEASE","5.2.6.RELEASE","5.2.7.RELEASE","5.2.8.RELEASE","5.2.9.RELEASE","5.3.0","5.3.1","5.3.10","5.3.11","5.3.12","5.3.13","5.3.14","5.3.15","5.3.16","5.3.17","5.3.18","5.3.2","5.3.3","5.3.4","5.3.5","5.3.6","5.3.7","5.3.8","5.3.9"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.6.RELEASE-7","3.0.6.RELEASE-8","3.0.6.RELEASE-9","3.0.6.RELEASE-10","3.0.6.RELEASE-11","3.0.6.RELEASE-12","3.0.6.RELEASE-13","3.0.6.RELEASE-13ubuntu0.1~esm1","3.0.6.RELEASE-13ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.13-3","3.2.13-4","3.2.13-5","3.2.13-5ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.11-1","4.3.12-1","4.3.13-2","4.3.14-1","4.3.22-1~18.04","4.3.22-1~18.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.22-4","4.3.22-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-1","4.3.30-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2","4.3.30-2ubuntu0.24.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-2ubuntu1","4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libspring-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.30-3ubuntu1"]}],"affected_more":381,"products":[{"vendor":"spring","product":"spring framework"},{"vendor":"vmware","product":"spring framework"},{"vendor":"vmware","product":"spring_framework"}],"references":[{"url":"https://spring.io/security/cve-2026-41838","tags":["Vendor Advisory","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41838","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework/issues/36740","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/a42a6e0c6ac64eb18954729ca5e3fe64b05a39b5","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/commit/bff98999056fc29b573ff47ad2433462eb52833c","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19","tags":["web"]},{"url":"https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q723-847q-5g8g"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41838.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-41838","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-framework","tags":["package"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41254","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-41838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-41838","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-41838","title":"Spring Framework Predictable Session ID in WebSocket Module","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T03:49:15.933Z","modified":"2026-06-27T20:57:50.695Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T13:41:08.498858Z"}],"euvd":[{"id":"EUVD-2026-35325","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T03:49:15Z","modified":"2026-06-27T20:57:50Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:23.349194Z"}],"ghsa":[{"id":"GHSA-q723-847q-5g8g","title":"Spring Framework Predictable Session ID in WebSocket Module","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T06:31:57Z","modified":"2026-07-29T18:08:20Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:40:54.767849Z"}],"nvd":[{"id":"CVE-2026-41838","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T05:16:35.723Z","modified":"2026-07-23T08:10:00.137Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T14:12:22.73178Z"}],"osv":[{"id":"CVE-2026-41838","title":"Spring Framework Predictable Session ID in WebSocket Module","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T03:49:15.933Z","modified":"2026-11-10T02:45:36.449140541Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-330"],"updated_at":"2026-11-10T03:16:41.950556Z"},{"id":"DEBIAN-CVE-2026-41838","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.  Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T05:16:35.723Z","modified":"2026-10-01T03:03:04.66136718Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"GHSA-q723-847q-5g8g","title":"Spring Framework Predictable Session ID in WebSocket Module","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules.\n\nAffected versions:\nSpring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T06:31:57Z","modified":"2026-07-29T18:26:45.36362Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-330"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"UBUNTU-CVE-2026-41838","description":"IDs for WebSocket sessions in the spring-websocket module are not cryptographically unpredictable, which may be possible to exploit in combination with inadequate authorization rules. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0 through 6.1.27; 5.3.0 through 5.3.48.","status":"published","published":"2026-06-09T05:16:00Z","modified":"2026-10-17T13:00:04.048320223Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"CLSA-2026-1781484854","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 7 CVEs. Fixed in 6.1.20-tuxcare.5.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-11-02T19:45:36.829461117Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1781571271","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 10 CVEs. Fixed in 6.1.21-tuxcare.7.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-11-02T19:45:36.039371206Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1781657705","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 8 CVEs. Fixed in 5.3.39-tuxcare.13.","status":"published","published":"2026-08-04T14:52:37Z","modified":"2026-11-02T19:45:34.96407694Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1782781166","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 5.3.37-tuxcare.7.","status":"published","published":"2026-08-04T14:52:40Z","modified":"2026-10-29T19:45:10.982129338Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783299707","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.3.7-tuxcare.4.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-10-30T07:30:03.120299613Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783386123","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.3.31-tuxcare.6.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-10-30T07:30:03.147615084Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783645384","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 5.3.25-tuxcare.4.","status":"published","published":"2026-08-04T14:52:42Z","modified":"2026-10-29T19:45:10.886399574Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1783645402","title":"TuxCare security update for org.springframework:spring-websocket (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-websocket to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.6.","status":"published","published":"2026-08-04T14:52:43Z","modified":"2026-10-30T07:30:16.406303401Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784164100","title":"TuxCare security update for org.springframework (3 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 3 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.3.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-11-02T19:45:44.943692912Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1784509763","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 5.3.27-tuxcare.6.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-10-30T07:30:18.105288981Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784509765","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.3.24-tuxcare.4.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-10-30T07:30:16.699890247Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1784509766","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 8 CVEs. Fixed in 5.3.29-tuxcare.5.","status":"published","published":"2026-08-04T14:52:44Z","modified":"2026-10-30T07:30:16.136117234Z","updated_at":"2026-11-02T15:43:46.151924Z"},{"id":"CLSA-2026-1785727936","title":"TuxCare security update for org.springframework (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 4 CVEs. Fixed in 6.1.7-tuxcare.1.","status":"published","published":"2026-08-04T14:52:51Z","modified":"2026-10-30T07:30:17.126466343Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1785815205","title":"TuxCare security update for org.springframework (23 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 23 CVEs. Fixed in 5.1.6.RELEASE-tuxcare.2.","status":"published","published":"2026-08-04T14:52:51Z","modified":"2026-11-02T19:45:49.917621697Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785939604","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 9 CVEs. Fixed in 5.3.30-tuxcare.5.","status":"published","published":"2026-08-05T14:20:04Z","modified":"2026-11-02T19:45:48.196881782Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785946854","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 3 org.springframework packages to address 2 CVEs. Fixed in 5.1.9.RELEASE-tuxcare.3.","status":"published","published":"2026-08-05T16:20:54Z","modified":"2026-11-02T19:45:50.47583911Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785952964","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 14 CVEs. Fixed in 6.2.15-tuxcare.3.","status":"published","published":"2026-08-05T18:02:44Z","modified":"2026-11-02T19:45:48.182834652Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785957138","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 11 CVEs. Fixed in 5.0.13.RELEASE-tuxcare.2.","status":"published","published":"2026-08-05T19:12:18Z","modified":"2026-11-02T19:45:51.344685565Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785958008","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 11 CVEs. Fixed in 6.1.15-tuxcare.1.","status":"published","published":"2026-08-05T19:26:48Z","modified":"2026-11-02T19:45:50.372958437Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1785959911","title":"TuxCare security update for org.springframework (5 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 5 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.3.","status":"published","published":"2026-08-05T19:58:31Z","modified":"2026-11-02T19:45:49.017500599Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786515016","title":"TuxCare security update for org.springframework (17 CVEs)","description":"TuxCare rebuilt 8 org.springframework packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.","status":"published","published":"2026-08-12T06:10:16Z","modified":"2026-11-02T19:45:54.240538705Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786609421","title":"TuxCare security update for org.grails (17 CVEs)","description":"TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1.","status":"withdrawn","published":"2026-08-13T08:23:41Z","modified":"2026-10-26T13:21:31Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1786623881","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 6.0.16-tuxcare.5.","status":"published","published":"2026-08-13T12:24:41Z","modified":"2026-11-02T19:45:53.406621083Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1786717612","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 6.0.23-tuxcare.5.","status":"published","published":"2026-08-14T14:26:52Z","modified":"2026-11-02T19:45:54.494556158Z","updated_at":"2026-11-02T20:30:00.884471Z"},{"id":"CLSA-2026-1787148952","title":"TuxCare security update for org.springframework (11 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 11 CVEs. Fixed in 6.1.16-tuxcare.2.","status":"published","published":"2026-08-19T14:15:52Z","modified":"2026-11-02T19:45:56.461042291Z","updated_at":"2026-11-02T20:29:50.522328Z"},{"id":"CLSA-2026-1787205684","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 6.1.19-tuxcare.1.","status":"published","published":"2026-08-20T06:01:24Z","modified":"2026-11-02T19:45:56.579312389Z","updated_at":"2026-11-02T20:29:50.522328Z"},{"id":"CLSA-2026-1787311912","title":"TuxCare security update for org.springframework (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.7.","status":"published","published":"2026-08-21T11:31:52Z","modified":"2026-11-02T19:46:01.082852429Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1787313469","title":"TuxCare security update for org.springframework (7 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 7 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.3.","status":"published","published":"2026-08-21T11:57:49Z","modified":"2026-11-02T19:46:01.026990018Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1787317539","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 6 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.6.","status":"published","published":"2026-08-21T13:05:39Z","modified":"2026-11-02T19:46:00.071219071Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1787559106","title":"TuxCare security update for org.springframework:spring-websocket (1 CVE)","description":"TuxCare rebuilt org.springframework:spring-websocket to address 1 CVE. Fixed in 4.2.9.RELEASE-tuxcare.9.","status":"published","published":"2026-08-24T08:11:46Z","modified":"2026-10-29T19:45:24.338540758Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787726627","title":"TuxCare security update for org.springframework (8 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 8 CVEs. Fixed in 6.1.13-tuxcare.1.","status":"published","published":"2026-08-26T06:43:47Z","modified":"2026-11-02T19:45:59.541190537Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1787726639","title":"TuxCare security update for org.springframework (10 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 10 CVEs. Fixed in 6.1.4-tuxcare.1.","status":"published","published":"2026-08-26T06:43:59Z","modified":"2026-11-02T19:46:00.417010152Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1787728788","title":"TuxCare security update for org.springframework (9 CVEs)","description":"TuxCare rebuilt 5 org.springframework packages to address 9 CVEs. Fixed in 6.2.13-tuxcare.1.","status":"published","published":"2026-08-26T07:19:48Z","modified":"2026-11-02T19:45:57.948706688Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1787732821","title":"TuxCare security update for org.springframework (6 CVEs)","description":"TuxCare rebuilt 4 org.springframework packages to address 6 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.4.","status":"published","published":"2026-08-26T08:27:01Z","modified":"2026-11-02T19:45:58.639641642Z","updated_at":"2026-11-02T20:29:49.757752Z"},{"id":"CLSA-2026-1788253370","title":"TuxCare security update for org.springframework (32 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1.","status":"published","published":"2026-09-01T09:02:50Z","modified":"2026-11-02T19:46:02.898287523Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788341776","title":"TuxCare security update for org.springframework (14 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4.","status":"published","published":"2026-09-02T09:36:16Z","modified":"2026-11-02T19:46:05.053439634Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788344824","title":"TuxCare security update for org.springframework (27 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 27 CVEs. Fixed in 6.0.13-tuxcare.1.","status":"published","published":"2026-09-02T10:27:04Z","modified":"2026-11-02T19:46:05.399273406Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788344832","title":"TuxCare security update for org.springframework (28 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 28 CVEs. Fixed in 6.0.15-tuxcare.1.","status":"published","published":"2026-09-02T10:27:12Z","modified":"2026-11-02T19:46:04.816881958Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788346056","title":"TuxCare security update for org.springframework (23 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 23 CVEs. Fixed in 6.0.11-tuxcare.1.","status":"published","published":"2026-09-02T10:47:36Z","modified":"2026-11-02T19:46:03.90689609Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788360559","title":"TuxCare security update for org.springframework (29 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 29 CVEs. Fixed in 5.3.21-tuxcare.1.","status":"published","published":"2026-09-02T14:49:19Z","modified":"2026-11-02T19:46:04.773724636Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788372470","title":"TuxCare security update for org.springframework (21 CVEs)","description":"TuxCare rebuilt 7 org.springframework packages to address 21 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.4.","status":"published","published":"2026-09-02T18:07:50Z","modified":"2026-11-02T19:46:04.664553118Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1788372833","title":"TuxCare security update for org.springframework (25 CVEs)","description":"TuxCare rebuilt 6 org.springframework packages to address 25 CVEs. Fixed in 6.0.12-tuxcare.1.","status":"published","published":"2026-09-02T18:13:53Z","modified":"2026-11-02T19:46:03.888401727Z","updated_at":"2026-11-02T20:29:46.576514Z"},{"id":"CLSA-2026-1789380988","title":"TuxCare security update for org.springframework (20 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 20 CVEs. Fixed in 5.2.11.RELEASE-tuxcare.1.","status":"published","published":"2026-09-14T10:16:28Z","modified":"2026-11-02T19:46:15.379985029Z","updated_at":"2026-11-02T20:29:33.792105Z"},{"id":"CLSA-2026-1789722420","title":"TuxCare security update for org.springframework (34 CVEs)","description":"TuxCare rebuilt 10 org.springframework packages to address 34 CVEs. Fixed in 6.2.12-tuxcare.1.","status":"published","published":"2026-09-18T09:07:00Z","modified":"2026-11-02T19:46:18.4339041Z","updated_at":"2026-11-02T20:29:28.838259Z"},{"id":"CLSA-2026-1790068633","title":"TuxCare security update for org.springframework (31 CVEs)","description":"TuxCare rebuilt 9 org.springframework packages to address 31 CVEs. Fixed in 6.0.14-tuxcare.1.","status":"published","published":"2026-09-22T09:17:13Z","modified":"2026-11-02T19:46:19.440429243Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1790068772","title":"TuxCare security update for org.springframework (36 CVEs)","description":"TuxCare rebuilt 11 org.springframework packages to address 36 CVEs. Fixed in 6.1.18-tuxcare.1.","status":"published","published":"2026-09-22T09:19:32Z","modified":"2026-11-02T19:46:19.638710531Z","updated_at":"2026-11-02T20:29:27.085992Z"}]},"sources_more":{"osv":38}}