{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6b3a6b09-c9a8-55d1-ae10-39b1878eddd4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7", "version": "4.1.7.RELEASE-tuxcare.7", "pedigree": { "ancestors": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE", "type": "library", "group": "org.springframework", "version": "4.1.7.RELEASE" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2009-1190", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:7425b521-471e-56ea-a4b0-44082b2688b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-1190 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2011-2730", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:4a9aa49d-7ba6-5560-b012-1b7daf003cef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2730 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2011-2894", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:5bda10f6-b4ea-565e-8ce7-5bbcb909e249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2894 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2014-3578", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:a1a73699-564c-5b1e-b061-3d8011829d3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3578 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2015-0201", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:87d06a0d-3532-5434-b9eb-b59bb5f0aa59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0201 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2015-5211", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:cdb11c9b-cab9-5bc6-8335-f6dede4aae93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2015-5211 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2016-5007", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:8127f805-a8ea-59f0-98d8-fcac73528a20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-5007 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-11040", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:32beb296-612c-50b8-944a-6f338b491f16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-11040 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1199", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:be2ba981-58ff-541f-8024-d918d247ad40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1199 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1257", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:80828ad6-9956-5a12-b884-95b4dce6898f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2018-1257 does not affect version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2018-1258", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:9f9ab5f2-9166-587e-a755-740ef457aa7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1258 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1271", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:908c628a-d217-59da-a3bf-291b4ec4cdef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1271 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1272", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:15d35007-7346-560d-b433-6d7c3eea34c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1272 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-15756", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:5c4e6912-2581-5203-b184-c39b40c554df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-15756 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:fa5e731a-ecda-5e2c-a3a4-61b062269f46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:5fdc6903-5d53-5815-aeef-ece478c39653", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:a3b24407-c064-5255-b0da-6a5586d93533", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:f38e8322-e629-5b41-a3f2-c25e743fbf27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:203d4e13-4cb9-5e3c-9fa7-dce5a889db48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:3cddc26d-6c22-54d1-8da3-f47bd106c1c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:516dbaff-463e-505c-870d-80d35fa14ef2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:51a05e31-7510-5b53-93b1-14186a1fab88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:6ce8d4d1-5840-5338-bed1-99fca9843d47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22233 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:d34e0b53-6628-5cc7-a026-4438104c4369", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:4a92567d-e4fc-5c43-b49c-04a320c38155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:d9ea47da-92e8-5093-9472-d5e02ff50c90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:09afc584-0201-5de4-9227-66af3084e138", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:be1cb4b5-b9e1-5d8f-8b1a-4584c82dcbb3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:23c56943-1ef2-5ea9-9c7e-3e21857e4d9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:b3e45ddb-32cc-5685-9031-9bd7b12e0c7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:89bfe3a2-d622-5f49-aff5-c2cea9f7c0d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:e2317d56-3aa0-5109-ac95-0ebe8adc6ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:c12549fb-1a4a-5437-a7b3-966fb9b4d2f1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41852 does not affect version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 4.1.7.RELEASE is not affected by CVE-2026-41852. The vulnerability requires record-style property accessor support (empty-prefix method lookup), which was introduced in Spring 5.2+ and does not exist in version 4.1.7. While this version lacks void return type validation for getter methods, it cannot invoke arbitrary zero-argument methods as described in the CVE.", "justification": "code_not_present" } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:ed207c94-9356-558f-9169-90afb4aee941", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:5a6d619b-458a-5b2f-a31d-dcb09c30e95a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:8e5824eb-22b2-5a12-b4c4-ee05666ff1cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ], "bom-ref": "urn:uuid:e6a43097-f290-543a-96fd-78ddbe685738", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.1.7.RELEASE-tuxcare.7 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@4.1.7.RELEASE-tuxcare.7" } ] }