{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:85aab426-5727-54be-8473-6ed9d8392392", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "pedigree": { "ancestors": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE", "type": "library", "group": "org.springframework", "version": "5.2.0.RELEASE" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2009-1190", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:68484f37-317b-5e2c-bd82-2612f5aeb67c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-1190 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2011-2730", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9c03bbc5-38d8-5b61-9454-6cf2fa2a9f08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2730 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2011-2894", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:64356d43-ca3e-5cb8-b4cf-c17c494fa902", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2894 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2014-3578", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:61b2f8a5-6539-53ed-9196-53e3c27fb217", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3578 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2015-0201", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8e709614-7593-5515-aaa8-be9c0c278c48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0201 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2015-5211", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0e12e951-6e72-56d9-b583-ea13c760cbfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5211 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2016-5007", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a9b4fccc-7a8c-51eb-acfc-876953ef8e8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-5007 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-11040", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c780fd6a-b398-568c-9faf-c88ba8801ba4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11040 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1199", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d03e0716-a641-5313-a8af-ad3b2a239086", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1199 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1257", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:362b1c9a-db12-5945-9286-ab9f3c49b6ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1257 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1258", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1b19eccc-d351-51e5-aac8-031aa738bfab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1258 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1271", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1e7d6891-59f9-5111-a53d-2190ef467061", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1271 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-1272", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fac002ce-a4bd-50c3-938c-e5337c14f600", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1272 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2018-15756", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c52fbff5-f802-5a74-a5b9-6cdaec81c7c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-15756 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6b53d384-223b-5294-a949-ae96cbac4d1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:41be4acb-0d7d-5800-848b-e6d6eb7b430a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4264ed29-4f30-5b4e-b6e9-b88075d3e014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5bef5892-f8de-5141-8df6-f177b94774d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1f2f9493-bdb3-5cfd-b986-6ea69a248b0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5d3b1e1c-244b-5334-a384-b3ed3c3cb744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f03667c6-b9b5-580e-9500-ea2028c011ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0e05cc70-32d0-5491-a725-82bf08ae5e62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7b1ed2fb-637e-5ec2-9070-d96d7b10a435", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22233 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:41570861-2a16-53bd-83ff-82aecf8d4b50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b862a166-61da-51b8-86c8-e9e8a8bf8e71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d9f9a499-6014-5485-b58e-21be357aa0eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8a2dd9ac-35f1-5308-bade-415c3ca70473", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-context-support 5.2.0.RELEASE-tuxcare.5. direct vulnerability is in Spring Framework project - affected versions are spring-core 5.3.0-5.3.44 / 6.0.0-6.1.22 / 6.2.0-6.2.10, version 5.2.0.RELEASE is not in this range" } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b39566d1-c860-5b05-9e18-8eb64ee3921e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f5860a6a-1be2-5b01-96f3-792d0d8c4d0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0afeb032-0496-5fba-8506-33a153396317", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:dc7467fe-4b18-5ba3-aa04-8f2fb189a5f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cf7901f4-8518-5a7b-b157-88eb5a28bfb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ee47bd02-ba1d-5d3c-a454-fb3490ff7982", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9b7f7e84-739f-525e-90e8-ae694ca8d0a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f7074b14-ef6c-5df0-b95b-675422ae3fee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support, and is fixed in 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3e9b080b-ddc5-566b-b6c7-e8b4014e6a20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.0.RELEASE-tuxcare.5" } ] }