{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7a5a8a7c-78a9-559c-9917-0ce59798d86a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring", "version": "5.3.24-tuxcare.8", "purl": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7d54ccec-0d9e-5494-aad4-e5d08d197886", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4687e614-e6f1-54ad-a5a3-df6c6b21cc55", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3a02a458-040d-5279-8f94-384e5bb5100e", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f672ca1a-f4cd-59e6-a141-a2b0eedb0f52", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:34b6aa7c-0c91-5686-b6e9-054820771213", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c275be45-d924-5ed7-b641-9e18627ce5a2", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cc52cb9d-bd23-58be-be22-34fe4294f550", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2708dabb-52ea-5649-97b0-a7608c748494", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cd61fe08-08d9-548a-9990-b9e77382abd4", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e3c53e9c-9292-5c67-a6f8-16b41856b774", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:775e5a7c-845d-5d3b-b7dd-32bf30ff4fbe", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6e990ac5-e72c-5219-a136-1a5ecb5ed1f0", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6f5304dc-eef3-5d17-9f17-9fc26bfa290e", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ecb6dabf-d1e8-5133-b268-b0943bbba602", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:516593ab-0efb-5c3e-a06e-27c321488787", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d229ce7d-c12f-50c1-9e57-f4a444ad8c33", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8a23967c-7a23-5a49-9513-2a6c7f9624ce", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f54c7f5d-916c-519d-860a-6caf20721a3d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f539b06d-d63b-540d-bbcb-589155722d43", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:655dccf5-942c-5ebf-8eac-6c463af4b21f", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ebe0d892-7b93-5c22-90d5-8b92e5077cef", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:76b67894-cd1a-58ba-b3f7-89402be342c4", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b684d550-851a-56a8-a87e-807e180f98eb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e0afdef2-2376-5b28-bd21-fb1dab407f93", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ced56cf3-d511-5c0c-8552-e949f0403193", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:78fa0c8f-dae0-561e-93f0-ea0ecbb7b300", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4e260364-26db-5fac-a2c6-0ab7aa818407", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e3f6e3db-71f3-50da-8665-dd199de8251c", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e7e00232-1659-5f6f-8303-e0fc8f38a35a", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cb0aed98-8de6-55ff-8fba-31590d990fb9", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9ed1725d-7c20-59b3-9afe-f8727725101d", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8a97873d-3ba6-5ebf-91c3-f27112388f6b", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0c3d0945-0f51-5954-9c0a-bc9abf57be39", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b7924cb2-b8f4-5803-ac8d-aae303b2a60e", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:30b3270d-7a8f-589a-af55-47092ba5352b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f470ef16-4a25-55a5-9414-13cd42093ad2", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4b0b9018-1d8a-5784-af60-73cedd8a3ca5", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:219a9a7b-2f07-590b-b342-99206d338990", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5a3ca229-fa05-5d46-a91a-3a11b635ad10", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:15676dce-a3f3-5b87-b4c2-bf04ca7aac00", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dbfed291-8184-5282-a073-2a1b86c407de", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f27330cf-33d3-5155-9279-780e112ad783", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5dc34a54-edf8-59c4-9854-b3a913cc194f", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f5cf4147-f63d-5b2d-a0dc-3d0f98c71f39", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3fddb022-21df-54e6-bf3d-0ba7f870f09b", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:32aa6b55-a96b-57f2-bd22-022bd069a706", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fc1af39b-f337-5767-84df-92e22c914363", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d7df1d54-7302-59ef-ba75-db81911fb6e2", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1d4fae76-e225-50e2-9277-8db14e66e50a", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:35e928fd-bdc2-5b90-9104-24bf4296abc7", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f377f004-da4c-5f9f-a2c1-573e3ea8af5a", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:42d016a0-9c4e-548e-aa6f-bb68dfbf0de1", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:30f69096-0731-572c-b8b1-086810d4d381", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.3.24-tuxcare.8" } ] }