{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6e64c940-399e-5ee3-94df-f1640e00b5a5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.3.39-tuxcare.21", "purl": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:878b925c-ce7f-5d9a-b6c7-158cf03c222a", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a9b6b776-2de3-5ba0-958e-31c589c0c4b0", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.21 of org.springframework:spring-beans. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b1b6cfe2-ee82-5b67-882f-ae89b7443884", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1493d940-02c3-50fe-9eb2-34f6a94dc176", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5fa5eaf6-0392-5a69-ac00-e60e9446b6f2", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5c443976-461e-5b5f-9391-eec544109528", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:246e553f-27af-5218-b4bb-926802a6c2cd", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f899f41d-4022-56df-bbfb-8ead35ec7315", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-beans 5.3.39-tuxcare.21." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7b3d0eb1-a0d3-5f76-b864-7ff34d6a4db8", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e6bf1015-c5ff-5394-8618-d36a6a28902c", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7582f2d0-05d8-57fe-8464-e10ebefca65c", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d46e527a-2a10-5522-9adf-00edc03cfac1", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:01c2e5b2-c702-577b-9662-03000cdaa758", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ac8f4357-bd53-5d72-97dd-cd77fbddf277", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e1ac61c5-7c99-5829-b866-6d1571b20b0f", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:6e825704-960c-5d15-9b52-2c92a4b0f78b", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4e341eca-0fdb-53de-9b75-42e74de7e206", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:db4e7ac4-0f67-54d3-a715-c9a996dbba31", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:26044837-8db3-5095-8bb8-5155a402188f", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a6792bde-a767-5a4b-abea-06b6572725b4", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:3cab6049-71b1-5738-8ba2-fde9c80a3325", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:cb5a0035-7d65-58e2-bfc0-dbefb8c4721d", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:3ffa1a3d-0ebd-5259-b810-c6eced03a424", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:877009b0-4b5b-5308-ab6c-73126f41f243", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7f64232b-ce89-5c93-ac96-b410aa4347dc", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:2dde8339-a5bd-5783-a854-2dfb6e11bae8", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7a0fb00c-04ed-54ce-97eb-fb8b00488402", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f7bf921e-7dd8-5753-8b8f-d7bbd74d314b", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1b90925a-4b12-5149-b71e-860a6563fbfa", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:09af0fa4-e6f1-594d-91e6-00646b96c9c6", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a9557ab8-a420-51f0-b177-00b52392bf50", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a84ff4be-761d-5357-8a6a-e2bc11ff7447", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c9f98864-3c1c-5fce-9711-16ecf70759f0", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:77567857-7ce3-5e5e-8408-d959233d340f", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d77b53c5-8044-5f14-826f-19325ca314b8", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:fe255b02-55e6-5618-894b-29472e80f751", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b6d9195a-a7a2-5ed2-83e2-9013b3e93cc2", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:86271b6c-1a00-5efe-9e5f-4bac2014a18b", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ca971637-c5ea-5304-9281-661d78dc936f", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:84fdf242-a495-529a-80fb-3344d04ceeb7", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ae889ef1-be25-50c0-a645-6dd5c74b824b", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0300fb3c-c916-5bbf-bfdb-ffcd80ff63c1", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a23ad39e-bb75-5c9c-bec0-f5086f8b6cc6", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b2ca2307-b4d5-55f3-b261-c6a9327ff2a0", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e8c50ea3-d4e5-54b1-853f-36eb4194bf2f", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:572c838c-f6e4-5159-a479-28c355ea4f6f", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:21d32a2b-1f52-547b-a10a-4190b64b0f34", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.21 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.21" } ] }