{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0192f1ac-6adf-5398-a99f-b0dbcf1dcd82", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "5.3.30-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:40d3d11f-d848-5fe1-98bf-e64b3070bc2f", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7211bcad-de99-55a3-84ea-122ab97bb936", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:dc4b2100-4d4c-5826-bd5e-3b5d6e4449c0", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:02ef08fd-5c28-5d80-b17e-9626e1d6fc78", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:87f9d02d-ffeb-5d7a-b7e3-1b833dc77ccd", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5660f694-08db-55fd-9a2e-bc4c6d352487", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ef3edb29-8f6e-5e20-bbd5-8746857ffbda", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ba7e8b12-f1f2-5875-a069-83cffcd5520c", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:55b665a1-ea88-59ce-a353-d1c923d4cf08", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5cb0b279-ac96-5f20-aef8-e1d82bdfc6c1", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b47a1110-ac1b-5cf7-82ba-c1dc6956347a", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3dede817-c879-59e7-b1d2-18cc44e0f654", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:579d147a-bbcf-5133-9ff7-b7321f52e56f", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7229d125-08b6-5685-9bce-f7c9a5ad4006", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f789a8a7-c9ec-5efb-b94f-3c617d6bdc4f", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e1f3c03c-64d8-5347-8b7a-b71244e3aff0", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b5f37c3a-d5ea-5b3b-a62e-f456d9836bea", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4c956fe6-d377-5714-b0d2-d5e8b041c5df", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:013f9f7a-9243-5a38-aa50-7f977f49084c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:eb6ae867-1d79-5a16-b9ea-ca77b70af6f2", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:627a6e16-1201-579d-8aa5-44b36e4d0b17", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:11fefe56-756a-5a27-9aa7-d16a6afb0bf6", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.10 of org.springframework:spring-tx. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9da38da7-8582-507e-a1ff-12c98e37fca3", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d43b8622-97f8-5182-8f9b-f9cb2c39aba0", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3acc9935-cb6b-5ed5-84b3-eb4e6f961503", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:87d0ad3f-3b14-56d0-aae1-e574ad9f6673", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e49ed519-4bf1-5113-93ee-19d0462a34ae", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3314efaa-2baf-53f5-9fc8-62a0acc3270c", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8bf3cf97-7140-54db-a885-4278babfec66", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f0e10478-6bef-58d2-8fc3-f235b0cb8e1f", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2ba885a5-c53d-5fb1-87b2-256845a1b5c4", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:984b48e9-6984-525d-9704-39ebc896bf51", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ae29eedd-74c8-5490-8d23-ce01ba3097d0", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d7a020b1-0903-55e6-bc2c-8e68b7a972e3", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7fa6b141-b574-56c7-9b3b-bcd571e7454f", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ce6f2c3e-997d-5262-80d4-b22c894d1cfc", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:43623e6e-84d3-5b7c-b821-73256fadf396", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e17ca30b-6743-5b22-adc9-0073b6cf8937", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5ea41375-320a-5502-90c8-bd73c6b4b99b", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5595b41d-616c-5207-b2d6-72e1625aaa13", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ae4ab79f-937c-5a38-b139-0ccb1811d5b0", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:73866804-6068-51e2-977b-890ca23f00ba", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fc92aa1f-8f86-54f3-97b9-84a7fc9c778b", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:19941865-c350-5f1f-921d-2b1b3af6ed00", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e8bf09b8-1e5c-5eb3-9df4-5145d492bf14", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:17a541ad-8cca-50bc-bd3f-639aee14caa5", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:dc7d04fd-64c4-50ac-b8bc-96911c96ec55", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:08ecba2a-e958-5599-833a-e0d8345518ad", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:dea1189e-16f0-58f9-a498-39b8a589a150", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:09c42078-4404-5f7b-a207-516c03d8c204", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.10" } ] }