{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2490a55d-71f6-5043-9b11-2f8061b1b159", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "5.3.24-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c134830b-3891-5ca0-b6fd-a78f6f7bf496", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:011c2557-130e-5d37-9bdc-517aa16853eb", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:00b8e71f-3008-5b57-b155-4d7eeb58a2f6", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:375396e9-069e-5804-9370-55e0303e3948", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5d7edf59-dd8d-5eac-b43d-d39fce3f5e98", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cb8b249b-0cf1-5198-8a84-0d4874e2106f", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0632a7d1-d7bd-54de-9afd-463a4a58fc09", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3f6d9dae-3bb5-5209-9132-80bb93792753", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:488c4615-9f69-5992-bb53-aaff80b3c31d", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bd23bb35-00d8-534d-a636-62104d8f854f", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d9cc1ad9-301a-50cc-98b4-e8113de5a9bd", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:29a23bbe-ff3b-5bb8-93c8-e562650d0bce", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:06b6703a-11ab-51aa-8100-dfea0db5cdc2", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b7619720-20ab-54d0-a960-0f43456e40d9", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5766c1bb-a85e-5d90-a893-c903aeb2217f", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:132a11b5-e09e-5a2f-9e3c-711d1677349e", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4fb3d7af-c3b5-5b75-9ee7-a033da36a088", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b793b904-1758-5b44-a0ce-1041ef83f504", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:09070c01-677d-5950-8e3a-fbb6ecdbe907", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d8b6848a-1724-5b25-af3c-4199e77a52e0", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f30466cb-5fa0-5a73-aa20-ae9d291f18c4", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8e3dad7f-199b-5ee6-a8ec-383e07376431", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:52545fef-ac36-529c-a37b-d50eebc9b3b3", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:03d2f179-d60c-5c83-8972-2e4e8c1c6d4c", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:757d8d0b-ef4e-59e0-9b5f-8a006f11aa39", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.7 of org.springframework:spring-tx. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:88b7af8f-ddab-53e3-95b9-54c9726ea3c0", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e301809f-3bf6-5651-939d-99784f0b3deb", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:14900e16-631c-5801-b917-c1dafae2181d", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fca4a5e2-0497-590d-b1e5-7c2c626491ed", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:edeb0bab-dfa2-5f2c-ad62-727f9c4041f8", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0089840c-6de4-5041-9390-aa2db0791fa9", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1baac7e1-6c65-5b29-8092-dc00814e5b93", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2f7215ff-6e56-5f4e-a52b-9895cfdf3161", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2f59cd86-52c6-5f5f-868b-53add24541cc", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5f745b4f-fd0c-5a8a-8969-65fdb75a379d", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9ca908e4-9d97-5e2f-9c71-a20edecc1ed6", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3014e75a-f7c6-5451-a7ec-07d719b8828f", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a2ce7d9b-cc47-52fd-8209-2c92f36788bd", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7ac11905-6185-5e07-b4a3-385dd0f295f3", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3e5ad0e5-45a4-5403-8de9-8f52d65f79e9", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c4165fff-9e0a-5d86-8ff2-2105bccbe9fa", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7e1ca542-4e5e-5049-a2e6-f9af34bb0158", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4d94bab3-784a-597b-8db9-c57c68400bef", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9bee4b79-c902-5315-8cc3-d9957c758772", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dbe8cc59-ad6e-5d7f-8cb6-deb0910dd79b", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b890e490-0cc6-541d-b8e0-660472cfbf66", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:621fd0bf-3921-5349-b011-77636c49ce3c", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ff4b7b07-4d66-5e12-abf6-fbf31abbfe19", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9df67044-1026-5078-bda7-ec2753947b7d", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4fdf9f62-3020-5c64-a4f7-503e3eff6624", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b91097f8-0c3e-5755-a3ce-1cccb2f58f92", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b15934f3-4b4c-5d9f-88ec-3b5acd8feeb5", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:63816f50-e1e4-58c9-a91e-59a78e378ddd", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.7" } ] }