{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:48873f92-12b6-5814-b550-cd164de76b57", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-framework-bom", "version": "5.3.30-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:11cb27ce-ea71-56dc-b924-d8fb9189658a", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ff913168-ec23-530b-b60d-e4f27ca14803", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e6c464ab-112a-5bd8-b403-7103737f8322", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8483a199-c3ba-5433-89be-4c9337949f77", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a3af1809-9e1e-5d33-9be6-87a00f8e7ab0", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e6cdb094-b3b0-5de0-a369-2bce8e2b146e", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8f0763b1-0442-5e96-9b23-54b2db6cadf6", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c6656d4e-6cfc-580f-91a4-6a758645340b", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3cca1bf4-6a4d-5420-abdf-2a62de256221", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e9672479-afe0-56db-858d-22ae714eb725", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:250b92b2-b15e-5307-b49f-29004949c6e5", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:368d5391-5084-5fde-857e-37de5ca57fd5", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:46a2ca2d-2bbd-5c61-a4b7-e4970ed42b28", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a77007e2-f249-501d-9676-73941fea0115", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6e78dee7-6a04-5964-9e5b-558c66a54023", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2c5476f9-9642-5e08-823b-ddbb8a34019f", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:47fd2eb1-2f9e-50cd-b9ba-b63700fa8e0d", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5083e89c-c8ae-5a20-9907-c1c2b86c519e", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f47b5967-3dad-5de9-8354-68051e491810", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0e16d018-c18d-515a-9f96-4632868ff0d1", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cca9d541-3f88-5647-9e46-f957b3b7b6a7", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:46d3bc1e-d6ae-55a1-af56-1b278f807a22", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2b87b76a-37c0-5e0b-bf54-f4c061b28350", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f0983491-f1fd-5a0e-901d-eb3fec3d98e3", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:aeaa52d3-8ebd-5356-b4c1-867e1c378500", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fa94a5fe-42b5-5257-9ef0-9ec023d3c1df", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:55bcb532-bcec-54b9-92ca-976a6b1f7988", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:68620ba8-e43b-5ba8-8128-3f79510cae00", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6b343942-db52-5dbb-b2fb-6a82fcc3b3cf", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:47872211-347e-5c91-87bc-a894fa949ec6", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9169a3c7-d00f-5877-96be-e5f7826c9e82", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:36fc9ef8-68f3-5a13-9684-266a4ad13dcf", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fbd62235-9ad8-5804-a8ce-0a4d175707cf", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d66d3602-7d6d-5c90-b14d-caee037320a0", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3030c7c5-9a3a-52a8-a61d-f65aac481fb5", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e580c815-0707-5e16-9051-e8757363d3c2", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d2d90bac-d024-54fc-b255-9fffde787a64", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b7902d41-0775-5794-99c0-30696d103425", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:34ab7e4d-7d5c-500d-9310-a90275725812", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:36c4e889-5058-5155-b5dd-9901bf4ac415", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:25817a85-83c6-5496-ab31-9a0682839576", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fd03a25d-8158-51d1-9190-e0ec212d5624", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4f8ab591-13d2-5c7c-8465-c04b332cef3a", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:db377347-9106-5e8f-98d5-64840789e883", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ecba1075-3eba-57d3-9795-9d82445b822d", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a8c396d7-783b-5558-8922-26ee6bb69e9d", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:79ac3c27-c8fd-569b-b569-1579b5598432", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4e245d85-df35-586e-b261-25f307540064", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:78021caa-ccf7-5eff-9346-b6865375913b", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bd92fb11-710e-5eb5-9c87-08db4e0e5172", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@5.3.30-tuxcare.10" } ] }