{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:04909010-dc4c-5d16-b1c0-c700ff93aa1d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.27-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ddd17cf7-4c57-57a3-9885-994c7e9a66d6", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:689cd4c4-24f9-59f5-b82a-61bae068dd01", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ff0bced5-452d-5b6b-9c64-4e0f8712794b", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bba705d2-cc2c-5c16-8fc1-a95c0f3e64a3", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:71345f0a-e979-5b03-bfb6-66b0567eae8e", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5189e478-2de5-56b8-bde5-f20d9cdd9259", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:46312fb2-9f8a-5fdd-b0c3-b4377d08f2e9", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d5f3cc31-f532-5c55-8677-4aa5e2c1eb6c", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e4c7e7ed-eb26-592f-8bcb-4b4d80e93ccc", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:89de85d0-47e5-5578-83e5-998158283084", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fc43575b-d686-5798-b22d-f7232577ee1f", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cfac2501-ce38-5683-847e-07ca11f4630a", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-test 5.3.27-tuxcare.9." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:38456826-f1fe-5c8f-92e0-b7e965c4eaa7", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a8bed6dc-f9f6-5da0-90f5-08d240f0e4df", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e930aae8-d335-5412-9626-32181d5ab3f6", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f4200fa3-c09d-5ccc-a403-afe861223061", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f499b24b-64bc-574f-b266-ffeb755570a1", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:97c656ba-4e46-52a7-94e1-0ebcf5471467", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b1bebc03-4718-535d-916b-9a172d7bf338", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9368352d-2dbb-5185-b090-ef97fa508eed", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:494d34d7-3278-5195-9810-cdd142bb53bb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:500ec9a2-8f8b-5a3c-9e2c-fafd1c12aeb9", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ca60cc57-7c36-5df1-81d7-0dd2169da5c7", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-test. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9075f2a0-3989-55e7-80dd-d861b73a74af", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c80ef967-648d-595f-8195-38194651886b", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:af9e7a51-8151-5c4a-b101-7d97d8bd7e4e", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9d146619-6253-5f6a-8dc6-6c4cd3b0b661", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7cf9a128-bcac-5741-9ad8-8fa1404344e7", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e8cc8941-7d30-5e5e-943d-0fff92f7894b", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8590c884-2d81-5a20-84a7-eaf2a2dc4574", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-test. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f0227fba-46b1-5d3e-88ce-750ec27e1140", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9a306561-558d-53b3-ba14-c964096475f1", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:23ac62c4-274e-575d-a476-38591ebf8b8a", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0decf247-f8a6-574e-8e08-50b5ca7b0845", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0dea6dd5-c8fc-5f2c-82fd-b8ed25e88014", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:46b61df4-9912-5fee-9d01-12815598b36f", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c0eb1507-593d-50e3-bfa7-336c7b2092f4", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:540862f3-6466-5b56-a6f7-714c50290fe9", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2be96133-8930-575c-a4c6-10c96d6653fc", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ef7849a8-3081-52b1-a8a6-8f0b6796356d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:18060dc3-12a0-54ba-a1a3-f534903485a8", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d6dda785-549c-5d78-b7cd-f5e17723eea5", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:79ae4ea0-61d0-5818-a00e-1b929a6397d9", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2a9a72e8-6877-5dc9-92d3-12ca6d89070b", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bdcfe809-3f6c-5a70-80dd-cc6e40903acf", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:efa38840-fe1f-5482-b930-23fb9006dc5f", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ad92f1ab-8bc4-5b4d-87b3-bd32123f2845", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d3626e34-ec3f-5c43-a2e0-d65032d3afb7", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3fda0536-b4be-5338-960c-b87771f57891", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:825e3e9d-1cfc-5eae-bfc5-94ed58ae3198", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:609ccda9-3b1c-54e2-a22e-642004a76687", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.27-tuxcare.9" } ] }