{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:52871c33-9154-587c-a4ff-977b0bc8fd2d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "5.3.24-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a3e679e2-5168-53b8-a460-e4d2c86ecef4", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:40d47b6f-61af-5c19-a1b8-e9ff72377335", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f8dd3330-5a72-509a-b6a3-93ec2c315e94", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:76044d51-8028-5213-a5a3-977a8ee36801", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7d3f173a-4d9c-5200-b7c9-3347dc36f45a", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7a375b06-7835-5f59-9a08-899c68a4ee77", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:27f1af4b-2c30-534f-8878-65c4ca7ee0fe", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0b7a536a-da85-51d2-acc0-609db15a17cd", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7bfd60ec-97ce-525f-937c-f1f680b713aa", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5a7bf4d8-6dea-5001-9ffd-e17590570d21", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3b09b342-ec9b-5d53-9987-7ce978d47ded", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a4a930f1-acbd-5d23-9716-965b6dff1eac", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c27fa0a0-3cde-5daa-8260-62fbc0c639f3", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6f898f21-1272-55e1-909b-2328496651fb", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:81cf8059-84f3-54fa-9ab2-47af40574033", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3fb81805-ba44-5b63-a385-f9601d83c4ca", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:601265bd-43ed-5eef-88b1-ed05e118d757", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c84f6c2c-b780-5fe4-afc6-007ee1d2a09e", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f3c01df9-83b3-5879-a2b0-76696c23a4d7", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fa303b14-2e0d-54bc-8d4e-938826c13e70", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:48ccff88-d3bf-557f-88ba-716e55d9ed11", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:114780ea-5a9e-507e-83f9-4499c8d99b80", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ec0d981d-4945-5cff-93af-5b19c42849ac", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:15fd39f5-ab71-5526-8470-33c4a965dd6e", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:86923a69-cce5-5225-8408-477996ae3cc4", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring-oxm. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2c7ac0e0-1203-5269-82f6-02d1e8acec1d", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f257fed7-0a88-5cc4-80bf-3c041895a3be", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7b72a2c1-e4cb-59d6-981c-3f86a954af79", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6a325b39-0c73-5dc2-981d-9a07bc28336d", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:be270d7e-0905-5286-9ca5-f9fe49034bb2", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:357bf897-9203-5126-af6d-81f815c2276b", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a4ed803a-d0c1-5d3c-85b6-19653632e486", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e5ad704d-5a37-528f-a2c4-3a7084a9906b", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5154d94a-e265-517a-99a3-05f676f635ae", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bd1cae01-3d3a-50f7-b30b-663e794e6f8e", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c5df3f7f-733e-5cfc-8e51-64595dcc23a7", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:006cf23b-8e58-588b-ac9b-22f3afffceff", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5b0e681a-542a-5493-be67-0648f80463e8", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7892ef6a-f9d1-5be3-aad6-127fc8bbdd99", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0cd61ca1-2f3e-5f8a-99da-96acf879fad9", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:eccf4a96-f9d6-5deb-9f1e-6f835b0dfa02", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c6adc34b-75d7-5b76-9e99-26b392cb090d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cba22e7c-0334-5711-a1b5-aef869201d3d", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:430e0b53-e75b-53ed-86ee-b555b73228a4", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:582b85dd-6180-53b9-921a-190d1a533c2b", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ce59243a-f56f-5103-bd68-3d7b85f01be9", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d7ed260d-fb07-58c9-b2be-6605da1279de", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a27fc760-f583-5e6e-9ff0-8a27b1299436", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7093efeb-4ecb-5824-b48c-96e87189d6da", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2845d6e3-dc77-5ccf-9d1e-7220ca4f3e93", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cbc6e270-aa82-5b0c-958d-80e680333db2", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:289cc9b6-4f39-523b-90f2-1b398972f400", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9decfdb8-ed2c-57d6-aec2-13da011c23a2", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.24-tuxcare.8" } ] }