{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8cdcbc2f-535a-58d7-ae9d-de1338204594", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21", "type": "library", "group": "org.springframework", "name": "spring", "version": "5.3.39-tuxcare.21", "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:9bf7bde5-9173-5e87-bf6d-f643561e0e20", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:882818c2-5197-5219-b9fb-cbfd6d0e132a", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.21 of org.springframework:spring. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:174d2215-5793-573f-b9d5-711c528209eb", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:2fa21a3e-84c8-50bc-8d6d-5935edd17e7f", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a9da4d58-e526-51b1-a36e-39b6140fba2a", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a482499a-bafa-58f2-8e6c-c08dee10586b", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:35325250-0d1c-5879-a1e3-32edbd04fb62", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:37157ef5-d9d7-5e8c-acff-a086c8b2ea22", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring 5.3.39-tuxcare.21." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e6702a8d-5d6f-5ebb-b5e3-dbf1acc61d76", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:2408896d-4161-5cdc-b4fc-a9b425b3ad6c", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ebfa4575-837e-52af-b9f6-6a7c95309571", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7e7ad371-1b95-5189-9ae6-9f4f736bb3fb", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e257dd9c-57cd-5c0f-a685-c6d7269c9f86", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c95eed69-2b99-5fd3-bb1f-b64aa5f5dc7a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:270db177-d383-54c6-b210-7792dcf55b31", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:07f60d5a-a69d-5bcb-8e0a-93a2ea5d4a9b", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:514066f3-0fb4-5c6c-b3d6-cb076c21bd9a", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:fee05b7e-a610-5229-bf32-329f737b7c1d", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:8c73de64-9e87-57e9-9cbe-515802183f66", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:484a95e6-f163-5b66-a07d-ae72863efe21", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e6af5da2-57b7-5e70-afdd-f647f9d4251e", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:56189b01-76b1-5a6d-902e-88541a749854", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5bcaf39a-9ab2-57e2-9af3-ea3da8821b21", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:9882ddd4-1237-54c3-b94f-77f9c6f4eb2c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1e0a9c61-bd4f-5d31-940e-39afd920e143", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4570335a-8080-504b-8e6b-be1d01bbed34", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ab077780-6056-5431-b9be-91abf0941a19", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:3297470b-3adf-5895-ae4d-d0da28f2aa13", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:cec3c6a2-dd8e-5616-92d2-faca2c04b7c9", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c0d93021-16ac-5e30-a920-d4b540525430", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:104f350a-7311-54ba-b485-d76092b5e3b4", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5fb7f249-e679-558f-b8d5-50a256201b1f", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:da396852-2bbf-541a-b601-3799e33fce88", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5c0253de-9d7c-5abb-b06e-59b21cc106f0", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5b9df76f-93d1-5ae6-bb91-0a159658ce23", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c2f18cd8-017b-5061-896c-24f18a06bf0a", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:70a491eb-3236-5bb2-a8bd-67480ca0c024", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f95b041d-9b45-572d-88e5-4703b5007f82", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e7f0d144-c6c5-5e21-b836-5f9b5fe433ce", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:eb9cb7c3-50bd-57f9-8669-c629676ab624", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ccd2d7bc-b813-566b-a774-d629d85b11d3", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e18f9fc9-e6ef-5888-879f-972f02ef13ac", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:857433b5-9420-5839-bfdb-05b8cbf1ab68", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a31a0219-b2f0-5de9-a79f-db1ac099b28e", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:993d60fc-6f66-5082-a51d-4965ee6366b5", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:dc92fdff-b6c6-53c2-a069-00e2285ebc88", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f73b7509-ec01-5339-90b6-9c8b77a34e79", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.21 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.21" } ] }