{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:14be2da3-082c-546b-ae3a-f034d0a3910c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "5.3.24-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:69d84491-1a2e-5f5d-9b22-4609ed767c21", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:eea7c532-e95f-5842-87ff-6c9365182829", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4e6557fc-c7c2-5c41-b18a-99b91010b792", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c37374fb-39b8-56c9-89f5-2da9e08aae82", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e464ff17-aa49-5c7b-bd4a-d4eeb560a591", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:71faa834-f294-53a8-bf1b-897c95c0ca3e", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5a6a1efb-7368-584e-9c22-1a73d85ccc63", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:81318800-fdcc-5a19-9050-f0d3685ae8a7", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:48aa062d-bb8b-506d-9963-623669dc886f", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bbc74312-9527-52cc-ad33-961e0ef7a9b0", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7dd4b773-4f2d-59c8-ab0f-1b1ac7e9c73e", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9466ed3b-1289-561a-bbf4-9381bbe5d599", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8092f8a8-8f2b-5320-827a-58ea106fe43f", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:142f5b22-c8b7-576a-a88f-b61fcb38f236", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:18d0fa6b-bb1e-5362-9550-03bdfb0a06aa", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e93f22b4-85bd-5586-9498-465972b77739", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4857dafd-080e-556b-8f7a-f71eb31168aa", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:590b4aab-4ca0-53f3-826c-f0e816b308e7", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9b5c1fe6-c098-536b-97f2-3be21b3bfe40", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1d34aa74-38dc-5f52-9edf-a5e6ebf1b558", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:88cde5ae-072e-5131-b495-33eaea4d649b", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:de350721-9260-50e7-92fd-031f089f31a0", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3046090d-ba18-5dff-a540-2d6e89d9e7e6", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4eb4a088-5b8c-59a8-8941-af405d3a2fd9", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4d95b140-88f5-5b23-b473-b9db060ddeda", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.7 of org.springframework:spring-oxm. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1272462b-4832-531b-8009-e8f0f8573b71", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4270b3ed-fc29-5841-a32e-cc483ced977b", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:548051ef-3c44-5b49-9517-568d1db2bf81", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:11c8cea7-5143-5aae-bcd5-7f1112673587", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2ce1b7fa-09a0-500f-a34b-d980dbdf3de2", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1f76a398-f612-53ef-8022-f89b7ec0e85d", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4780a369-5d29-59e0-9301-0a76899aeb86", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e551762f-1d61-5d9b-a9fa-e03b6bbc9e0c", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:44118eaf-5ae1-5987-b180-46bc4fef3a5c", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:088c1941-92f1-53f7-9627-193c045211b0", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dd1a7aea-0e0d-5f57-9383-c6d2035a694f", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8ae760d7-8895-532d-a48c-c9e0262c4800", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4f04d8b2-25bf-5c26-a850-e6e52156b198", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7bf115ea-a7bf-5a65-a237-310193ac3177", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:65cef8e5-318c-50c9-86e7-37a0e113b083", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:92ed3b5b-0b27-5d62-b00a-f18db7e7eec3", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6c0a5fea-c551-5d6c-a216-6237c7840789", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:50689e09-8a65-5c24-a6eb-3f42991ca882", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5ae512e3-17fa-5cc6-87ed-0e2a87a93714", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1c1a80c9-161f-5191-8484-1b814bff5078", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:efdb054f-aafd-5bb2-891d-7e49ecbacf28", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:77e77f4b-30f9-5878-bd02-1b00934fb5f2", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5b3faf6b-4f12-518d-9aeb-8cd6d406759c", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6623e872-85ab-55d5-897c-1e40981e58d1", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:444e3667-5afe-5f51-aa34-a016fd84a72b", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1ba165c9-fac7-599f-adef-df95ab519263", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:79fc78a6-2666-585c-8366-163e05dbea9c", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bd26ded5-14e5-5210-be3a-a5cd4059ac48", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.7 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.7" } ] }