{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8f5ede1d-1b2c-55f8-b3da-ab3a086b00ec", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21", "type": "library", "group": "org.springframework", "name": "spring-context", "version": "5.3.39-tuxcare.21", "purl": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:90db2d29-e22e-5fe4-aea5-5cfeb38c090e", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:463bda8e-9f8d-5eb7-b330-d6da05a66f56", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.21 of org.springframework:spring-context. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:49aba819-0aed-5198-9cf2-b83da8a11c1a", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:080cf3c7-ea92-58a4-8f69-6fb7aabdad92", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ceac8ee5-4776-560c-8d10-11245d758afb", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:35e96fa1-42cb-509d-9cc7-075149bc2353", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7a5fdc1f-dd79-5b66-a560-bfcd9e3d3aef", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:256c48c9-ecce-5104-9fd2-1b1f7a929088", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context 5.3.39-tuxcare.21." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:55c08cca-8df0-5510-9af8-a80f8eaddc86", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e49abcf4-4278-5ad0-b456-4219e658c6a1", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:16ae10a5-daa6-5af4-a015-0fb5a21d465d", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:cfdebe1e-31b0-5545-b36e-a364eb35eded", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:92250f02-515d-5d8a-93ec-1e16daef0399", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1c50ed97-51b1-508c-95ac-fd24b3f4e07c", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:3779b7c2-3ef7-5f04-a04a-a57d07d9a43a", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1eb88868-e9ff-5fda-bf2e-4965b5ccf6d7", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:34e47807-eeac-5362-b320-af3b005b705a", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:dab19f45-a73d-554a-a1c2-e88c7ceef044", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:9a73ed90-ea73-5768-ae29-cb3069c77706", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:00a3df7f-953b-5907-b1dd-d1461dbcce20", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:41485b56-2c1c-5b83-a648-e4f4a0d66188", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4cf13a41-ef0b-539d-ae8d-b7c80fe32071", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:59ca416e-d316-5bc6-8e0b-a7d7cf1dadc6", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e1b3bf73-4e77-5d04-8b83-99f813ca19d5", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ef1ae57b-5304-53f8-892a-32f5a4f47d99", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:17750797-7808-5531-bf76-81cb30e198fc", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b541bff6-1747-56df-aeef-0b98a46e8184", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:03b6c327-45ce-55ac-a077-f556b77a22e1", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:8396243c-7960-5441-85b5-4aa704369bca", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0f4c29ee-5abf-548c-a22b-fa69a3d2d427", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:79e6c3b5-ec6a-5d73-a15f-42d3f6bf1aa6", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:89b8edce-9782-5419-b852-a790aab3433b", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:cea4246f-ca56-50a3-84ac-14e004a66d09", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:cb6553f1-372f-58d3-8594-a586f3276300", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:8b0c553f-9607-5a95-bb2d-fff684b67134", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:bb5e2d1c-ee05-5ae2-8c61-191701f3fcea", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ce475991-f167-5616-a7b6-b480598f9014", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:edd461aa-0431-55db-9857-6e4f7d3c0f35", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5391f368-f58b-5cab-b605-aa2f482d868f", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0653f693-f100-5e21-99ec-cb43fa652536", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1c57d21f-f5e9-5af7-8044-dc0568c3520d", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4decc990-3c0d-5f55-93dc-013ecae78afd", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a04be816-edf5-50c8-bcc1-32ea986e1d30", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a587535d-ca12-52cb-b3ed-080e9342706c", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b6a5ebe7-bd12-5cc4-a17b-518711a772a6", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f7d36031-fc14-566b-96e4-69a3eff6606d", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:881f3816-cad4-507c-b9dd-6059a515a105", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.21 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.39-tuxcare.21" } ] }