{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dad2e137-a7f3-57ff-8a08-b4f8e66a9d40", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "5.3.30-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:78131288-723c-5187-ad3e-8227d62307b7", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:64abd479-9559-56f8-91a2-b46ea84a49de", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:32cf265c-7cd4-522d-b6fb-1738bfeccad9", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8d93425b-2b8b-5f8d-9650-3dfb520e8eb0", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fdd314cb-346d-5dd0-b47a-eff40bd6be86", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:728380c1-bec8-5198-ba57-6d702bafbd36", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:233a77b5-8456-5957-a19c-b7abd117dedb", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5a696c5d-ac5a-5d3f-8037-b0bc619b5b89", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2269e794-b03a-5a70-9652-4caf2f341a66", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ce45f189-9e68-57ee-a28b-33df7458dd37", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:83f4f448-4d3c-5ad5-a62b-ba4b712e10c0", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:eccded21-0c9a-5c3e-98e5-3c43acba321d", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bb2470d9-af87-5c37-a3b8-3fa4548d1ba7", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:52ea28be-fa34-55d0-8929-3678c57f2ba0", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:20975a35-4415-52b6-9ad3-8868b47fee15", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a21b53d0-49e4-58e7-b95f-7d6edd2c5d41", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d9529c33-915c-5665-8a30-9632cfaad341", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:26b25b5d-7232-55a7-83af-e554fff70a49", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:26d8c908-b1ad-5680-988c-0220c560c46e", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:796bc09b-627b-53f5-84c2-d8bb2f401556", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6a3b22a2-31a3-5f01-b188-09a24c6225d8", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2d066d44-819b-591b-95a5-4db644a8a969", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.10 of org.springframework:spring-oxm. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:98c42c93-31bf-5250-be33-a961d814a8c3", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:64b8676f-3edf-58c3-b851-bc45162cdfbd", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7ef7b540-4076-548b-aa2e-7c38fda2f23a", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:76ce6842-5bed-54c8-8ae3-cae5d978bcad", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b0cab1f9-6987-5d26-8df2-c45d6b25f84c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f1a43530-f665-5794-8d52-585123a60ce8", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:84166014-0fb3-5203-bb37-fb03b1184702", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:479b0c7b-91c9-599f-b5aa-c18b4eccfc90", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7e71f8ed-bdde-559b-b9c1-917b0b2d22dc", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:039b6bba-ab47-5387-a319-fc755516921c", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:08ca8986-7acc-5781-822a-ef0e6b461ba8", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5f1b246d-e4a1-5546-b801-4431f7dbc304", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2058d5ea-145a-57b5-a7f8-f9f504ac5b9a", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8e9d1c44-a897-5a8e-9046-b41d81a89b68", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:563a786b-0357-5e18-8d5e-4eaa0573dbbb", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a001edff-ce80-5b88-bee0-1e2f856fb754", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3f01712e-6e53-5b2a-a2ca-f32546d63a4d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:87af47ed-2f68-5609-be7b-1bb9cae1f313", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:45b3bf0d-1356-5f3a-8088-1c3e80770837", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2d85eaf6-0f60-5fab-8888-98ca7e2dbae6", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:020187c9-c5a6-50f4-8d36-1a0f2a5077ef", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c12da7f4-d72f-5d1c-b175-a7ffc01e8f9c", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7777ec76-01c9-5954-9050-2ce684ccbc7e", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:044e3b4e-e6b7-51ca-aabe-b63a761f50a2", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f7ac2cb1-2b3f-5e65-a8f2-a69ac98bc9b6", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ac20ebc9-0aba-535e-bb0d-88cb4678c104", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c49a503d-632b-5315-8c2d-baec1a93bd08", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7884439c-dd2b-5b4c-af66-f9e9eb718f07", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.10" } ] }