{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:69bc2341-36a2-5014-a06a-a9e9a587ebd8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "5.3.39-tuxcare.23", "purl": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:50cafda5-4eca-5a57-a004-f6194b95a5f7", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:dcfc272f-682b-5152-94c4-b75a5eb21c15", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.23 of org.springframework:spring-jcl. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:19247c8f-0584-53ce-8b9f-5922eefd5b23", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3462f621-7aa2-51ea-af9d-894802705b07", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:329f207b-f356-5ff0-a367-a8785c18bf69", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7334dd28-76c0-5e44-88a7-d1956cca1167", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:2421723e-e503-55c6-9da8-0b1b0c644861", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:35212ec2-e618-597f-94d2-48e7be337554", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-jcl 5.3.39-tuxcare.23." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:eb12179f-ba43-5c69-815d-91290e0586a0", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:af7a8beb-cca7-53cc-8082-ef9f19f60194", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:1a0dac12-abd4-5aa4-b158-0e155fd069de", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:00a852b6-8ce8-55cd-b335-76592bb59392", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:66fa9edf-0195-5e9e-a785-5c75e183eef9", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:e50821cf-3973-52c3-87c4-f6d24b236c4c", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:c9cb3c9a-6b57-550f-9f6c-0b5bee875611", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:65915d3d-07b5-5962-bd60-9934a14566af", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:295fa9cf-9036-537d-a475-43a0ff5880f4", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:d61d1710-5b1f-5468-bdb0-96fbdfd2f1ae", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:bbd640d3-07e8-565b-a0f2-88961a05028c", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:f6004304-f519-57c6-8fd8-f0622404feb0", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:25990a2a-9099-5e06-9b2c-1716c8167460", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:fa03d8ea-3901-5af8-b1d4-836d81e227da", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:5002bd8f-9d9a-5b9b-b462-845d017ee623", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7779b801-0545-5430-a6ee-680f1732a4b0", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3b02218d-b3a1-5ba6-9b62-649a5f81a232", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:ccc5b8e2-ca06-594a-a667-0176420b2c46", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:bb8b0844-7056-5233-83b1-413bbebc7462", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:41b4031f-645a-57ad-82f3-11942df0ccdc", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:5118e10e-d18a-5aba-bfda-9f43bbb2b9a8", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:d3db8fe9-ba04-53cd-928e-bc1cb1af47f9", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:dce7d440-5a44-52ae-8abc-ff230e0fa738", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:bd945a14-5e3b-5fb7-bde8-01229d432b5d", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:a0752f84-642d-5186-a8ec-1e46e8ab4c5d", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:e31aef58-88b7-5c72-b018-f27eece5449b", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:8280b46d-0050-5ed1-8083-34b9d90196d3", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:209b10b3-86ce-55d3-8f3b-fc1d39aa7769", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:22cefe64-ce25-5da3-802d-fe225c9b176c", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:1ce65cc9-47db-5c0c-90f9-4237f7a20532", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:68fe9cd0-bedc-55c5-9889-d0a1a79138de", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:066b7b86-0917-5b98-b2e9-ed3058721bce", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:18d9925e-e43c-5228-9c49-a4084fb72b39", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:dc7be7b0-74d8-5916-922c-e6ce0cf29c3c", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:37ba99c5-33a7-5b84-94be-1bbaa609360b", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:69ddb5ad-da5b-5df8-9241-a9a953fe7bdb", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:c085d3c3-40d6-5570-af18-94a05773c290", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:1f783355-8eb4-56d2-8338-1e0625bfba9a", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b258c333-5e6b-5413-9f93-a1aca2194ca7", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@5.3.39-tuxcare.23" } ] }