{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8d3d8338-e744-568d-956b-acb36ca23bcf", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.30-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bbfc158f-3e75-5df7-a9db-77027cb63bbc", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6f96dc10-f4cb-5f93-800c-e1ee72c9cea1", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b8465825-1be2-562b-b344-7841765789a5", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:491652f6-ff0c-5e14-95de-01e35d7b4540", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:918f346d-b026-5a48-b7fa-a9a1b45fd62b", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f697da3c-4fb2-5746-ba39-aba060a635ac", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a28def9c-93c9-5df2-91ce-3fee51fa9aae", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e9bbbf78-f409-507d-9e5f-788ace0cb945", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5ddcb8be-b2a8-595b-b517-18acb64da215", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8b7f2738-4bee-5a05-b9bc-5ad62a5ca551", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ec628bc2-c813-57c8-8ba8-ef05d36304d0", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b6684f58-a8b4-526c-8ee3-e34efcde42ae", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1ec959dc-cb44-5d67-9bc9-1bed7775dfd0", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4e646b5c-5129-5b50-8c96-ee4409153122", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7e3d4cbe-9cf1-583f-a9ae-c4b4d8a5fb52", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ea8cc3a5-beeb-5471-a2fc-e8db282b5479", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:df8c1a09-9c61-510e-a756-d3251bd8e041", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:89635d83-c688-5338-aabf-1eacd2381686", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:06e91f12-ae68-5b7d-98f1-b09ba03d0ae1", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6e71c953-188b-5084-8f90-8ae4d65431d1", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:13201f81-fca2-5448-be54-bcd346b2784a", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:52e1009f-9ec2-5014-8416-6c39f9e6454e", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.9 of org.springframework:spring-test. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:67124c0b-0332-5b8c-882d-fc94625b61a5", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:513ae0d0-97ee-5aa2-9d22-806d47b06ba7", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6684647c-4b6f-54cb-97e2-50200c89e4ee", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a91dde69-0772-5a99-8700-282a5a944bda", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4ed59211-4d9f-5b88-b6bc-6da495117314", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f813c20f-a849-5e24-ae9a-46bf9c529e51", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cb33fd52-10e9-5c39-8635-99a07c21297d", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4fe001fe-782d-524a-b67a-14c70344a05e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e4688792-6ba3-5061-9bfb-6d3e9033c07c", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:329ede50-bf66-58b2-b92c-3e48f08e239d", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ed218cae-924e-593d-9c37-ad2e433ff79c", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a0093300-970d-51df-af2c-de34046cfc82", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:347e4f4d-20df-54b1-a120-7031b97da8ac", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f604276d-753b-5faf-9188-0442cc652d34", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9b7bc0f0-9616-5bf4-a788-1c1781b52c21", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1127f0ee-0b14-5d9e-98ae-325a2ff8237a", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:69bcee95-9da6-528e-bb59-63c655577fd9", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:25d8a549-f13f-5ba9-91c3-c8e104db3e00", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:00f2a29a-5c47-59bd-8782-81bfe76219df", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3a70ce37-5618-5ca8-ab59-e5508c94db99", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ac498175-5390-556a-9689-f448b8ae791a", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9f71062b-9832-53f3-9a3d-422e201cee89", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bd15c262-0319-5dbc-ab98-be5139c3fb00", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:baa62737-ef05-57eb-97cd-d25569a8a987", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2e4bbb29-e288-5177-8078-0d775b49c239", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4ece150a-a77d-59ea-bb93-3287d4e30549", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:90427df5-cea5-5b0f-93d8-f470a3b35d37", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b2187965-e129-520d-8f65-c1631511ba28", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.9 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.9" } ] }