{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0ec92f33-bc3f-548e-a601-95ca55d9b966", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2", "version": "5.0.19.RELEASE-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE", "type": "library", "group": "org.springframework", "version": "5.0.19.RELEASE" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2009-1190", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fccf03b3-799b-5471-9362-f1c2dc4a326c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-1190 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2011-2730", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b86420ab-099e-53ac-9dba-124baee2d7de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2730 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2011-2894", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:43dae3b5-6402-53e5-b8fa-ffe344515d76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2894 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2014-3578", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c0bea334-1cb4-5f9c-9db2-49b72f8bcf39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3578 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2015-0201", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2f9fd8e6-7099-5b32-8292-5bf6ade19290", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0201 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2015-5211", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ba27083a-33b0-56c9-8323-eac78b60fb86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5211 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2016-5007", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bc9db18c-5296-565f-ba5c-0f37364952e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-5007 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-11040", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dede10d9-dca8-5e24-abd3-841ec98e6164", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11040 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1199", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5a821688-38f8-5a81-952f-69a3c8e52142", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1199 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1257", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e275c2af-5d71-591b-abbf-e761c2e5beb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1257 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1258", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:46cdf1e1-09ae-547f-8d2b-30cc40b7a3db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1258 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1271", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:77709a2c-841d-5240-9617-fff3919f8b1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1271 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1272", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:20198800-5ed2-5c54-a708-3dde52a2139d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1272 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-15756", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:46e02ba8-9c22-5574-b1f7-42c3511f2dee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-15756 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f9c962ed-48ea-519c-89f4-93ed072b8fe6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:c79dc3ce-06fc-5ba4-97f7-9375b997cdbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2db70ac9-6bca-5015-ae5c-c0dc34c4193b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6311ec09-823a-5d24-9748-45be627993b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ff276187-7766-52e5-8f47-6fb0937d0b94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:00a598fa-c261-551e-9692-bdc3689d7378", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:742d8708-c1d3-5357-86b3-55221d08edd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1bce6957-5ab3-5d59-b89c-55cb2b2e37f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:52687107-4c84-51cd-ba17-9a2f087bb78c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22233 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:89002d0b-cf23-524d-b7f2-1a7a8c9de88e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1db613d0-ba28-5d5d-8f0e-4c4cb087abd5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Target version 5.0.19.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. The vulnerability requires the presence of CVE-2022-22968 fix (which added case-insensitive field matching via toLowerCase()), but this version never received that fix. The target uses case-sensitive matching for disallowedFields without any toLowerCase() calls, so the locale-dependent toLowerCase() ...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b912ddb4-4604-5a61-8dce-fdd2a50a133f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d74cf22a-3ad3-5eb2-a527-103b33bde977", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:55b89122-c8a9-5d33-8649-65d9333dff9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0a3b3b6c-af8d-52e7-a2a7-38dd43b42806", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:791d9e16-25e1-5704-a02a-ea88f0f3944d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fc02055b-b51b-5266-9b56-35456a550d47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fce22381-e81f-5fcc-8f69-8614cb21c7ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:cc2eaee9-0d50-5dad-a55b-964f069f9f8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:93eb3077-e148-5436-91de-3b38bd02d734", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2353a71e-c804-591e-b87d-f38c6542c8c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0e1937f1-8555-5c7b-ae1c-a68ee84d344d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.0.19.RELEASE-tuxcare.2 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.19.RELEASE-tuxcare.2" } ] }