{"api_version":"v1","generated_at":"2026-10-06T06:10:00+00:00","product":{"cve_count":1,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-spring-by-vmware-spring-framework-a57a8da9d9fe","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Spring Framework","next_cursor":null,"observations":[{"affected":"4.3 < 4.3.29; 5.0 < 5.0.19; 5.1 < 5.1.18; 5.2 < 5.2.9","affected_versions_present":true,"cve_id":"CVE-2020-5421","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-5421","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-17T03:58:43.873Z","patch_url":"https://www.oracle.com/security-alerts/cpujan2021.html","primary_source":"","published":"2020-09-19T03:45:13.127Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"Spring by VMware"}}