{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c9b4a487-176d-52aa-84b7-e5d9a7ae40e9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-web", "version": "5.3.24-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6f54d97c-6ec7-57b8-b636-57247b98656f", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:72899215-ace6-5754-9b49-648a0bedffc2", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2bc92ae5-f4ca-5953-b641-7776f6ce557b", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fd102a26-66ba-5aba-b464-e22fc47b754a", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c4c5310d-3d56-5b7f-bc77-e9a1357777e6", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8d85af36-0120-50bf-a379-2ddc21adcc57", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fe9e8594-4ac7-5ca1-a6b0-a3cb21e247ab", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:31bbed35-8c33-5c38-9fe6-145337ff4f83", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:753d6be6-ff0c-568b-a349-b69465315747", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b0ff9fd3-bf7e-5201-b7cd-ec031b8833c5", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1d000fc5-7794-54c0-ba8d-074f07b9fda2", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8e2a7aa9-3c14-522b-bb34-ab99d4984fd7", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8deeaabc-45ad-55a3-bc31-edda855e2ece", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:84449ccb-7e8f-5552-927c-5b2550ada279", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b19ccc40-1863-5150-aadc-cd73d39a215f", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e553b579-e102-50f4-9024-ca264fa776cd", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:54d10f42-1c82-5db8-8003-14fcf09e795e", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:baeb1a67-a0a2-56de-a1e9-6e2c57ebda5b", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fbfc06cd-34d9-5b7f-86c9-9363281751c7", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ab5ad7bc-e82e-547c-8420-2fac278ac7a1", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:066eb339-2640-56d9-91d0-039cc012a244", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ff257a9e-e555-52d5-ad4e-9321e7865460", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:19032f39-ce3c-5636-82c3-071f4bfc5135", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:86d224d2-9888-5946-a6d9-bec1a5394591", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7d7ae994-db73-5d7c-9521-4c331bb479ac", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring-web. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:16865c75-10af-5c28-8861-36c4ff181f0f", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:33d7781a-f573-5528-bc38-60213eb7c99e", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bff23b49-f98c-5a77-858c-3ec430828f5b", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f4ba78da-33d7-5471-9f8e-02b636416e52", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a78107d4-241e-5b2b-82b0-dd785efb654c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:988a5a69-ed88-5f88-a9a5-1afaaabe8f10", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:24d9a7e5-274c-5652-a806-0e6dc8fbe14d", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c225c294-e2f2-5c19-879c-6945c0f381ed", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7722b7c6-653c-5443-9aa0-928e69efd180", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:48b23d6f-79df-5cd6-9fbd-cf30b408441e", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c8c748d2-c72a-5ef2-aae0-10b5ccb9fb40", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a51c20e3-026f-59e4-96e7-28d7468b1c49", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6e37b2d4-ade7-52b2-af96-c2254706b242", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a6da4ff8-32a5-5ced-930a-43d1aa8ba65c", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3fd18f17-acfd-55c5-9b2d-cbb3effac8e3", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:179cd1e4-45d2-5da7-aafd-3ff7e87fe8c7", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d43c8a8f-0a83-5d55-a43c-6e5f2a6e3afa", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2a7bbbab-45fc-52de-8f90-c8eaeffea6ac", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:217c5748-8990-5771-913b-9330edc7e1d5", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d570dbb0-e8b1-5f2c-b856-4554e2fef3e5", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7a2c08c1-3731-5031-89bb-beea56017dde", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:55cad61b-e181-5733-835a-5ba1ebcfc733", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:be2b3f95-21c0-5c80-b37a-d80f2fc18735", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:033f1823-0f29-551b-a7be-4785c97b7ec7", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:43aaf119-1fb1-511f-8250-0d275de312c3", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1c13553e-8470-5de3-a34b-c50b25a81d55", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:92c58581-ac52-5f01-92af-0b16ac24ad13", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:74c7b8d4-b202-573b-b087-6cd7d878ed41", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@5.3.24-tuxcare.8" } ] }