{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8dd36a0b-a9c0-5d6e-967e-3c7709bcb5d9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.30-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b3edfe01-24fb-5738-ab87-61cc6b1bde24", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d23ca74e-0d5e-525b-91d5-d3f30228cff6", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6cd68a94-ec25-5aac-adca-2d3d36c86329", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5662cf66-9349-5634-a801-0caf5eebad91", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:df00f5e0-2d3f-542c-9369-46036abcdff9", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7cda2c64-72e0-594d-9e93-8dcc0777a42c", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1e34670a-01c7-5453-8989-11d7b5cccf1f", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:66fadb94-7314-5665-b408-0bb31786f8a3", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:569e8f26-90de-5672-9d15-3d98cad0502a", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e952c41a-b066-578a-bf78-d3b831795a60", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3ec65948-a57b-56da-aa9f-cf0be9b0c55a", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:297969df-a06b-55a2-8c86-e46f69964b74", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:120e599c-3b35-581f-bf3d-a7e25bbff791", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9055076f-3da9-53ac-80e4-c34bdeec9e3c", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:80c2cd5d-176c-521b-88e2-ee130d8e7f80", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d8edd80b-7de3-5bd8-ae47-b53b4ae13fa0", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b3d7aa07-f492-5d07-ab28-0e9c39232512", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c24057fe-b3e1-5a8f-ae6f-47d407f15f4e", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ea316223-d9cd-5d6e-9a2c-c97b500250d2", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a20a315a-9fae-599f-b745-0e964b93a3e8", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:37427572-01b3-5d64-b274-add0cd9ee4ef", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e617085f-1497-5030-9d9a-554307f593d4", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.10 of org.springframework:spring-test. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b61cd1f3-9a81-55ec-bd1f-bec0735113da", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b3144e00-c44b-5299-b51b-5bc3e5b276dc", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:30322fb6-2c48-51d8-beb5-57957e83756d", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d9d68e98-9beb-507f-a14c-edfb5caa1cb6", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d2afd40f-bd60-50ca-9e00-09fbd4fb4c04", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:acfe47f2-c8a9-5212-8e89-4ea075ffed99", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c8f8c8d2-ef1a-5b16-b0ae-5b26b2fb1603", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1ece89bb-b5bf-5e5a-bfed-e54473ca8364", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5c1560b7-841e-5b7a-ad99-efe9390fda83", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:14683948-0d1e-5660-96bb-f224714f0015", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d7bb2fa6-de24-5aad-895c-8ff61c1f648e", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:15b1bf88-6ce0-5f0c-b161-00e901ec3798", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5b0e9b94-da5d-5485-8f9b-e20b4a32ee60", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:01c3af1a-9d62-5100-8701-5c746e327052", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b547bc8f-7ed3-56bf-82af-22f8e2bb54f6", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:64ce6ef3-6adb-5941-8ed5-2113f10d3950", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ca75e5c9-f2f1-5562-ae8b-7008436d2413", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:87eee622-74e0-53cb-9986-b2c0c736a0f4", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bd6e1bac-a616-5ee0-ba77-10515ec67cec", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:18eaf8dd-1a4c-5583-94e0-4764f544cbc9", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7383263f-17d8-54dd-bc8c-e66e585a4445", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d88cf414-f2e1-5152-ab3f-1294c3530080", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c233bb23-8c10-53ea-b45d-007bbb2ae810", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:056ef198-6b80-5eb4-92db-de47c7cfd9df", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:92cb09af-e590-54b5-82fd-c2a454652e31", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f5c08bec-1fae-5638-a25e-08599e82de10", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ca2339ac-35ca-581a-8c48-608f1f902c99", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:24fddb09-7574-5c7a-a6d9-361fd0809e9b", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.10" } ] }