{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1c4bc7d9-cf5d-53e1-913b-94aa4463b928", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "5.3.30-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:96738324-99fd-547b-bbf7-1d21923d0fc4", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:854786c7-4ac8-52e7-aab5-840081a1c125", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2bd3def1-3d5a-522a-b99d-7a1da87a1ebc", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ab1adfd6-23ac-5782-9f4a-211f06891b82", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a7050ea5-e1a0-589e-a64e-494b0fc37840", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:27c2d7dd-e7f0-5dd1-b957-5b7b070ff638", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2ba5520b-d32a-5cd0-ae4c-91d3a8e28cb6", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2b044e7f-cd42-5233-aa11-7c29db4482d3", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:77d31712-8388-52ed-a333-13da92906ba3", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:42f3ddc9-f91f-518c-9ffe-eb6e32aaa1f2", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:65e521b7-e82a-5284-9bbc-0f4a30a1fa46", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8963f9ff-3286-59af-9bb5-0603f64df12e", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:00a6d6c4-a2a2-5d51-8507-af1552146d86", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:da2c1037-73a5-5db0-b683-49019f533199", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9dd630a1-c890-5b42-b842-d58586f2be2a", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8108debf-8ecc-5f1b-8fcc-d388f68da6e2", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:83c2f48c-05a0-5758-8ec5-d675344bd204", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b51c7933-3b1a-5ae9-9b39-693cf8069282", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3351ca4f-c45a-5e67-a36a-e61e62e63a2a", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:23868abb-9360-5454-abab-4b26cedc39a8", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b296b1fd-0bf3-5b6a-8d07-82b7e79ae2e1", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3df414d6-d361-519d-94ee-6070ddf77303", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.9 of org.springframework:spring-oxm. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9d58ff3f-8571-5e00-b5a9-d0312813f6f0", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a67a69af-f41a-52cc-8bbe-a78610c01bf6", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6f8277e9-ba85-5ebe-9f8d-25c96319ed9d", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e5b5789a-df05-56f5-a0e9-e06f6d2f6386", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b31918f9-8dd5-56ec-a400-a0268a6cfb58", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c38559ee-d925-554b-b9ad-8b3a4ba1e9be", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5b86b664-75cd-5a88-aae9-9d2d4e36d806", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d5aa5470-e6df-5813-8178-4e8a8ebaea77", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:79789741-8ee3-5d37-a55e-386e2a4f0cbd", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f0e4ca0c-7190-5ac0-866b-09a539eb4601", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ae9689a9-d283-5406-904f-845790951bee", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:843a3ac4-1503-5987-ae24-85cd196901dc", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8199c381-6620-58aa-9e41-58d13c3d73a3", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:aeb8fe8a-35eb-5002-81f0-8d7d5ef5db41", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b6c49abd-9781-5aae-97b9-14394e4ff271", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e8334873-d032-5a1b-a625-16f0c7c5a633", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:da6d1e3f-8531-57ac-86c7-fd558f24cedb", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fb66ae53-bb12-56c5-b18a-4990060b8b22", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5148b9e3-d92d-58b4-9f56-080dd602004e", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:98e50dbb-140f-5ab5-a863-e91074ab3ee5", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:48e993d5-3ab0-588c-b7ba-4555e99cdb7a", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ec4edca6-e8f1-5e9a-b231-671e4c8b80aa", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2177f39f-3111-5b5f-8867-04a1e477ddf1", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8d7cfb27-e4e7-5502-a33b-c6e9ec1289d2", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:644e0e6b-e85b-5df1-8228-c04c37c2b6c1", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ee7433b6-e3c3-5eaa-9f10-4f61598e2633", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:94d6ca78-2d70-5a0d-b5bf-c9ca1592b777", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:eb144d44-c0f5-5f6d-a2fa-ce75ef31f842", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.9" } ] }