{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:16728def-47af-54f3-ad28-7cd9d80189bd", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "5.3.24-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:358ed179-8fdb-507b-88b2-16c3bc2357f6", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9b334c3e-39fa-566c-aa8a-fe607036dcf3", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d05f5ca2-fce3-582d-b75f-014cb45875e3", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1e924b5e-fa62-50c4-bd9b-c5379f399d1f", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c4e86bb5-b3c4-5c6d-8f94-72581cfd1b6a", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6ee32b29-ba36-5eb7-831f-cfbb0105bdf3", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:85d336af-60f9-5e86-bf29-9b7676647d5d", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:95ecbcfb-01ef-5c9b-b2e5-1ab498a734c4", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b9f2473b-eeef-5079-a945-49c0b0cd9134", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bbae9485-90e9-588b-9ee9-64caf93b959d", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:041b8bfa-ab35-55b2-9be8-16a81bd78d4f", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a4f6458d-6a3c-5e65-9ceb-244b51db4daf", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d9e11a4b-d779-581b-9992-f6869aa9d348", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5d74aa4e-1830-5ba3-b8d9-6b6ba312fc93", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8d6ef116-1f93-585a-b657-dab7b9cc5098", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8ad4e2df-6fe1-57d6-b0c4-99f3f7222e3a", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6ea5fb51-2712-5d57-ba8c-c9ac3e87b629", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d8c44359-4521-51fd-9d29-fa32e75e423d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0c4d0446-c44f-547e-a1ae-d02581ae68cf", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4f2bb76b-d186-50fc-91bf-d97da013192f", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d800d767-e2b8-5a8e-bc2a-a6232542c1fd", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b7bf2aa1-37a2-5b76-9505-f0f55279a810", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e376d00c-073a-51aa-92aa-22e5656e5aae", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:be5d9575-132e-5042-be3a-ac682cc5d351", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8fcf0313-77b9-5319-bbbc-6964000bc359", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring-jcl. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:269e8bc8-7786-5157-9a66-66aef19f79b1", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7774bb4f-ba92-5a6c-bdca-6cb8fad20842", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5773c5d9-ec4f-59b4-9c0c-fcad8c6cc9a9", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b4db634d-e967-54f5-91d1-7746ad878962", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:79e85518-e1ff-539a-80b4-910ddf417706", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:86db088b-8be3-5744-9911-62deebe2d375", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:210b28bd-4de9-5e06-9dba-9bcd1061e93b", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:de688074-44c8-57c2-b338-2c9569cf5e7a", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5570759e-75bb-59a5-ba22-f5f75c07eb84", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:382fd9ed-c5b9-5b47-bb3b-2806855223d0", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:30fe3761-4361-50d0-be06-2c135923a215", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:eeccce3c-d508-5d28-9cdf-78e54c66e8fa", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:31826845-b5b7-58b6-8d9b-ca61f8fee079", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1878155b-064b-598e-883f-217d85013c50", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b8b6ed4c-a9ba-541c-9fc7-6d1dbdb7b98d", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3dcb3ce8-0394-5d08-a7a7-a5efdb5eb2c5", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6961187f-88c2-5679-8ac8-9759b0cdfeb4", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a20d7494-6eb1-5260-9a42-9e23e29a8262", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a0b37fc7-087f-5ab2-aa2d-605d2091adba", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6e92a537-48d4-5d59-b2fb-829ac68d942b", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8820cfa0-8cc0-5549-9d1c-ec52cdcaa134", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1c54950e-e0e5-56c7-8811-e553b5cf7ea0", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:611cfd42-bd1d-5253-a043-25330eb2085e", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0875fc7f-b557-522d-b8a8-4ed79eb773e1", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:98e9e30e-3800-5b6a-a71e-9783e96696e8", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:795a3a8e-7a7a-5f98-9f9d-ff015e340508", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8c3b49ec-68fc-5a7d-ba33-74974488dd0b", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d4379879-8df2-53de-87d8-f4f6797bec68", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.24-tuxcare.8" } ] }