{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b0200618-083d-5903-a9e7-75ec334489a0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.29-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:639779c6-c4e8-5094-a953-43654a5f1da6", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e6f46bfe-391a-5484-a670-ff7f7f53933d", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:96f57308-58fe-5286-8dc3-31964838a7f4", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f0197034-294f-52e0-b453-ba4580c93bfa", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c46cdd0a-3f78-5dec-b880-31b8d5497389", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fa95f57e-4273-5e10-a728-4c10d4d08a60", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:96c018d9-159a-584d-a89a-0cd15d4d0e20", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d742774d-fd6f-59d7-8201-68afe0fa8217", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1a25ebfe-b810-5979-98e9-9a171df26991", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9c1cb543-3905-5930-ad77-9906af47ff7f", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:379c5c71-99f9-5e0b-b95e-b009df1a9e64", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cd622972-37d0-5197-862b-a2874ec6f2e6", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-test 5.3.29-tuxcare.10." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1aeb2979-b8ec-5b99-bce3-2e8fe6e0b093", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:68d52a43-2553-5fb8-baac-89bdaf831c40", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4bcd7fd6-4044-550d-8ee3-1a2ca2b2447b", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ce30f494-62b9-5523-a796-fe1db7bcd504", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d7bc32d2-f6dc-585f-bb18-fd17b3ab1b2b", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:11fa27d3-4714-51a0-966d-28041f92aa9d", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ae34efa3-57cb-52e8-9fdd-cca81b34f751", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cb000bfa-0f2b-5abe-9523-41149ff3be65", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:85679c72-ee08-5c32-a58b-49074a66a749", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:46cd0708-3b26-5bb5-b213-a0b3278eaa53", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1bf58fa1-4abb-5477-98bb-3747997a8e3f", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.10 of org.springframework:spring-test. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:645ec1d4-703d-5cf0-a8c0-a2ddb0884350", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:96839fb3-b748-598d-ae22-e3e69e026afd", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:27e86fc1-e0be-5f56-91ed-5e56fddf73f9", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d9d84a99-59c4-5fbf-80b8-8b32294224e3", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:365289ca-4890-59ce-9d30-0e22f8461d93", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2683b9ae-1ec2-5dc4-afa1-d77b0e9554e4", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b74e210b-ac42-51c8-bc34-c5a85617526a", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:45ad8dd6-23e8-570b-8bf5-d3caa2a8718e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d69fc360-4052-576b-a073-1af8a71bb07f", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a3b8b695-f099-5a2c-a002-a10400bf2522", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4366145e-73a7-54be-894d-630b11fe3e8a", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:573b9d99-14e5-5455-9bd6-8c82c5b0aa26", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d5cedf0f-f9b4-57da-9ce6-7b1bb66e8ff3", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9e1b43ba-3923-5a78-a787-d29d08328792", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0b5ebef4-b4e2-5aa5-a81c-615c28e2a724", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:23468837-3b45-5393-9144-bd34858f7134", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c87c3eea-7766-53e5-a840-c8366999e621", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c1036d86-773d-57dd-a8fe-7b47101749e3", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ca2e9911-6384-502f-b50d-8c732ae27957", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9f00f103-dcb3-5f94-a504-20dd9eb5046c", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e948c8c6-3e49-5139-b69d-aa691c481915", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d22206a1-9132-5abf-812a-26e4d80cff3d", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5ad3715d-ca3d-5275-b9f2-d24481a25276", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d69b711b-9142-51f0-b6ed-693549aac888", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f84fdc95-c215-551d-b261-47bbb3fc9ed6", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:320228fc-29bf-509a-89a8-93795a9888f0", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0a6a7882-d6d8-5f68-81db-bee55c2b2534", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b448d26a-5ede-54fd-9e18-abc3a82461d7", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.29-tuxcare.10" } ] }