{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7f3cc7ba-825f-58d1-ab77-7f197f73e879", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "5.3.24-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:94656c36-ecbc-59cb-be6c-18fd1e296bb7", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:02bed300-4136-5d45-9701-8ba965cc2796", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f87a823b-5ade-5705-baab-e5e318fa715b", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:07f8f126-583e-54c4-8e6b-04025d3bc0b3", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b5769c1e-b257-5ca0-a3e0-1848b1a50062", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3c30cac1-a5ea-5a7a-82c0-db6282ebc703", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1081e28a-2baa-5d52-8042-202ea21505e3", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:faed818c-ed62-524e-baed-c952828b4f8c", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2dedd324-03eb-5c33-b07c-947304b7e0a8", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:065dc41f-70ce-5015-b6c0-0ba66b147299", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:67e9307f-56db-5ee3-8f8c-eb3054d0cda4", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c24e6d24-40c3-5364-b2b2-9de5bb8112a0", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:49ee7749-7abd-50a0-a12e-255406035281", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:11447bb3-a56c-5abb-899c-f92156d50898", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:704b17be-1578-5c19-9af7-e4f67ac2c186", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6a775860-9143-547d-b84d-71a3d34d3a5e", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:07c949e1-2709-595c-b71f-b8c0b547667d", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f0c609e4-a7ec-5695-9289-07e25ee1b4e2", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7bc819ae-ad73-5b6c-9ef0-17ba31e9675e", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d8583e14-172c-5f2b-844a-f7a5a0ab5f61", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9dac9f22-b88f-52b5-8c2a-a74c9fffea5f", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bfd7e5fc-0497-534c-bc80-62f92d14ed55", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:60806e1b-611e-5259-80c2-4540c922c5b3", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ac3b9784-b53e-509f-919d-f9fd8f6922d1", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:458fec5d-82d0-5b16-9826-d8175f8b95bf", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring-tx. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:02ed4d39-c965-53c4-b6eb-a97efc0119da", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3d4fc6e5-bc01-5b9d-a65f-5c82f8c9a0f3", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d06886d6-3436-53fc-8e7d-7ce5bddd7284", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9cc1fbc6-e7b8-50cb-981e-2216d3199095", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1d2c5dad-2a08-5312-a093-b4556920cf6c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b6b966b9-530b-59c7-b145-1d4859b46c6a", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cd7bf227-6935-51ef-8c0d-280b4014c6aa", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5f110b60-68cd-5c0f-a4f7-5997acde7b15", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:aca750c1-ffc3-534e-8dfa-7f93afca6650", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:20830639-4cfc-5b68-8a34-b3723939efd7", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e031187a-76e3-5248-90f2-1de650f33a9e", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:40596f47-d11b-51a1-a6b6-7671cc65ba4d", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c7b70630-512b-5723-a8b5-28410b981df9", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b2de1968-5bb6-50ce-8daa-87828c76ddc0", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:40f4b7c8-5100-5d41-8f56-06249bf969e8", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e978ff48-5f06-53c0-be24-91ce7d9f7a85", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:38f8c174-0c3c-588f-b3c7-def9e24cde59", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b7d6a5bd-a112-5f30-8324-870ae23d1573", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:960d276f-1904-5d68-b5ae-3f0937727945", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7009d248-3a80-52c0-b95c-0f291e65bc27", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9477083c-0210-506f-83eb-56032a77dc65", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:52e1def7-d5ba-5ee2-9c9a-932973b6c2ad", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:18642b37-14a3-51bc-9654-67a261939f1a", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:efbc4e30-2090-53fc-901b-9ee4ebfc4f27", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:03e7326b-8af0-55e1-91fa-95e4f4702aed", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0f5173b1-224e-56c1-adc8-543453bdecb8", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2a70c815-a952-5d2b-b3b5-1beb11dbeec4", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a358be42-e9d8-5a3a-9343-1d0e11f010a4", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.24-tuxcare.8" } ] }