{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4c067f08-fb95-50c3-b460-78cf3da92383", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-jdbc", "version": "5.3.30-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2bf69e24-7d04-5492-81dd-dde26dc38071", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4d45200b-6e31-5b1a-bf21-f14a8f69cfb4", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c02bab3a-f8d7-5b8b-9bf3-ed33d0945f0f", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cb38df48-52d9-599c-b7af-9fe1441e5655", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3c0ac304-d517-541a-a456-906e859bcbad", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:352618c6-ec08-584f-b731-1b9b9d6a1d33", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:52154429-90bb-5482-8f0b-be7627d5e189", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0b856b62-1011-5e0e-b8a9-bf8e3d49415e", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d90227ae-5c9b-5fc8-a013-99242eceac76", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e26de5d7-9932-5c04-8bc2-47a2cba9e3bf", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ea9afc30-3b1a-5578-8a05-17922a844d7e", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a89fce74-7c52-5c7f-805e-b4ed149006a6", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:841d5948-4de0-5903-8014-0e62abe812fa", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d3bd972d-bd97-530e-8238-cbae76dcaa41", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:177d6d73-9952-5f3f-9452-37e74ee26c67", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:359a8d64-81e4-5a1d-8981-715a40020039", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d3805cd4-c407-5b72-b0ee-857204c3535a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3d118e30-ab9b-54a4-974c-66fa5d30aed7", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cd4e27bb-729f-543c-9537-627060015f27", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:437ca4f6-97b1-5a3a-9d25-a75c7f0edc20", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:40f924f7-3573-57e1-bc09-7e2d1347545f", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:20c9cd58-cf63-5c3b-97b7-e475f228b734", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:150bf767-7906-593d-8167-698ba28b0142", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c98a0dea-539b-5cc4-a169-c94957eecca8", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:569f18de-6594-51fc-b1d5-ed66a4debc70", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9c3f0286-d6f5-5f23-9010-b94796ed1d1c", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:17e0f3d3-46e8-5670-b44d-12d78c9f5efc", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5ff724ae-91fa-5252-b6ec-1f8b3c1c8150", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:906e4f65-3e46-5fcb-852f-18af984dd0bb", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:17014e62-83a3-5eab-972c-409ce8a1bba0", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c861c887-700b-5751-97ba-e878b4376bf2", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:aee1dac8-11dc-5d86-82d4-5946c4a8374b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d2775bd8-d13f-54c2-912b-9783fc69f314", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d0aef960-67e9-5d48-bcb4-5df7c3737f60", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f5fe4f5a-a52f-57f8-8e15-d0a90e8aaf32", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d36944c8-45a7-50d0-894f-eeb14440bb6b", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3a0fe282-1db9-5fe3-a048-62f7ee9f44a4", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9d2603ff-7f51-5d46-9890-f8eceee2a65d", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:90342130-0b27-5d44-a82d-aa6c4ab0c05b", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:72743f52-258d-538d-a175-a70c2c16ef3c", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d09e0403-11d5-5c12-a6e9-e13e74fa49ed", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8e622391-00d0-52f0-a1f6-061b2e705195", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b5b4b60b-55bc-5ca1-a70d-7e8a604f67be", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b85c7e69-4a96-5184-a682-ac5f8f498900", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e9b677da-612e-56c3-a94e-fe586bde2265", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:949e21df-a2b4-5b34-9f75-b24548e1ce36", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3266aae7-e0f9-55e8-baaf-d2a825487baf", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5b8b8a89-9f5b-523f-b374-506190c84842", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3c9fe0ef-b263-5072-9e96-0b8a558f9194", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:24dea577-ab3e-56de-ba6d-a0704199ebe8", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.3.30-tuxcare.9" } ] }