{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6dbdf732-bcd2-526b-bcb3-7bfeb6a84b31", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "5.3.30-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:54e97a2b-bf1d-5c8e-a671-2ff08813f9c1", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7ebfd1e6-7c17-50af-a765-860a8869107e", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d8ef5cf4-3055-52b5-b153-cec119f3ee77", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bd4d87d9-8ac0-55e8-a1c7-2edd89fb83c3", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:835c7dcf-c373-5347-a593-61221e8e1f11", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ee18562f-cb14-5182-b371-56ae9acc4ebf", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e7f5f6a1-f06a-5c84-98ee-8ef5568d694b", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:efea4c9a-1cfa-50c5-8af1-633fa6cf8fa6", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9ff5eeee-299b-536b-996f-96ef31ef646d", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6a2d5c58-5c8a-5202-9d66-ba318b5abf7a", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5a21a335-c06b-524e-a60e-33aa282d923c", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d3ebc944-35c3-5415-9882-3b809a7516e9", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8d54f1c4-eafb-54a4-925f-4a63dde20676", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2771f8d1-ea03-57a6-98cd-e1b3557c50f3", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8e85f48c-7ffa-501e-a8a7-83ce8295c5e3", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8ed07a3a-3074-53cd-8d6a-2dc50f37ebd4", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:510d112f-5c7f-5a06-a0ad-10c875dc9a38", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c901f25f-0aa0-5525-bd0f-03e99ba33af3", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6505fcb9-bd1a-5e31-b2e0-e2d2f417bfb5", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0f97c319-fda8-5ebc-9b11-3bf3c1cbf9d0", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1068d50e-c420-5786-bfc7-0b2e46b9a002", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:163bc3c6-9634-5a43-8430-4d775123180e", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.10 of org.springframework:spring-jcl. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9c8167d6-3dba-5e3e-8ed2-80444c733747", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fba76e01-6494-5386-a428-c98bf889ff5c", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0f233fbd-aa91-5633-b379-8a405607a854", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:680a8c22-0e44-511a-a95d-be2baad67e63", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:dec2397c-c88c-5362-9a42-a77695d22f83", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:704b2a7e-c4be-5d35-a22a-f63f4818a37e", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7c070373-c151-5e42-b820-cf867839cdb2", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9504ef10-e69a-5f95-b90d-b864f6248677", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:92f92ac4-eadf-50f8-819f-9b1eb6b72bb3", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e0a01a38-b673-559e-8652-a9ac648809ed", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bde71a04-25c5-5c1d-91aa-70d1f6418971", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5a8624ae-a5ac-5bb9-a66b-7d4a356dcf9c", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:89afdef6-5c7d-588a-93de-b634307e29c8", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ea7b921a-3c63-5696-acc3-280bf16247d7", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cbdd913a-362b-55a2-b045-02419ac51355", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0901e079-0472-5ce3-83bd-7b276a30b52c", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:82e219b3-9e8a-569f-af7f-832749069e26", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9aaf3a1e-f412-5ea5-a6aa-fdc670118d7e", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:938dfb20-6dfb-5754-9640-b3f571cdd001", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f3338f26-9a4e-546d-9528-53da411e2a5e", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:754b09af-cfe1-5439-be80-713915a232ee", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fea4a4fa-8d03-5892-a4a8-837f6d7a6517", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b0d910c8-fce7-5e8a-a710-eb4fc14a330f", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:51bb4983-bba7-58ff-ac53-17233b2e4c95", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:85d9b34a-caba-5aaa-84db-2648743e0868", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:46d34c6c-4280-545c-9dd5-6590c0fe5f23", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:de6ed95d-22a5-5d7b-88d9-c73102fe550d", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a31fc820-0087-50b3-8239-dca176dd0019", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.30-tuxcare.10" } ] }