{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cf5dc62e-d52e-504c-aa6d-07666dec7ac5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "5.3.39-tuxcare.22", "purl": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5a0805c4-43fd-5214-a35d-8e3df21c06b0", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:6f8e79ca-f69b-5f74-8c13-68568f6318d5", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.22 of org.springframework:spring-webflux. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:e357fd34-c86c-5598-9d52-ee3f3986d2e2", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:ac1af1c9-4040-588e-ac85-ca50ceae13fa", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:8e830103-cc90-55cd-bf68-ae8f5266b696", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:a08989c9-ea8f-573c-a66d-45efd7ecb038", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:cd08cff9-417e-5d68-83db-c6a6d8e3ba6f", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:f5614296-fcb8-596d-a54b-4f6ffc4be9a5", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-webflux 5.3.39-tuxcare.22." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:44929b6b-b679-56ea-91b0-8dc138aed350", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:a1d4adfe-4fd1-59d3-8c0a-3a8ef1ea736c", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:39c38ce8-ec7d-5573-b655-21a08f39f86e", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:6df2076c-91c1-54cc-8bc5-45e04d919620", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:b6f038de-c036-505c-ad8a-5fc07f203b91", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:a0bc770c-c7a3-597d-942c-73c5a57a81fe", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:a3aef3a6-3d22-5015-8f94-f183df2e5bb2", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:89740e63-77dd-5327-af94-b030ad23d1d8", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:ec86eb99-5c47-5f05-b27f-20c6cdb95c48", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:694b2f83-aa9d-5a49-b7fc-df1642eadbfa", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:ee6fdff1-a585-5131-a7a7-dc0fc425c64b", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:3dab4274-77f7-5e11-b51d-606b5966df90", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:6610b84b-addf-5435-a817-37aacfd59502", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:a536e39e-fdce-5b14-98f2-223d41f78bb9", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:a40ca0e4-c42d-5a94-8ebb-029c3a4e300f", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:5dbd4d26-e80f-5f67-8988-4885e421b92f", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:b844f2fc-5d11-58a9-9973-0d4431d1af4c", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:ea3d9534-87ed-56b0-a72d-dbda7a4e706e", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:ba892ddd-ea48-53aa-ba2c-a97db70591dd", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:f33f97ec-e37c-5794-905b-a664ac147102", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:b048ed34-0d72-57a9-81ec-ca592122b115", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:fed0ef39-80bc-59d1-90e7-e37643f4dcef", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:6221c66b-718a-50fe-bf94-591a7cebeed5", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:18dcce45-342f-5dce-9954-338c0fd90d40", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:d0f0f3b9-bed0-5c28-99e7-ce0e50c66860", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:c0937b7d-190a-5c9d-86d6-473846612e50", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:7a811303-84d3-5b05-a6d7-8ce8eba8a392", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:77443683-2fac-5613-affa-4c70938fa09c", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:c7007c96-d06a-59e5-b6f8-26bba1cba040", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:6369f6be-41b9-51ba-8507-3e1f729c058b", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:9ce7dcac-b5c2-50a1-9bb9-6e4568cb5df5", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:ef9b3527-a8c8-5465-ad35-d64a37f3737f", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:d3a3e39a-b924-55bb-ab32-68917ec7d87a", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:c2747ea8-4a92-56ca-b88e-5e2ef9b602e7", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:7effdbbe-6fca-5f66-a4e3-aa9e645b58d4", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:9f07fbdc-3ee8-5102-a95f-23f323356db5", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:278e29ce-c446-5dc0-ac36-7442dffd80dd", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:0848259c-46be-5569-bca7-ba87afb3c5fe", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }, { "bom-ref": "urn:uuid:7dd5155e-f6a5-54cf-9f3f-35b64201d3a0", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.22 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.22" } ] }