{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ef2574bd-3566-5b57-90fc-3ee7b3168b37", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23", "type": "library", "group": "org.springframework", "name": "spring", "version": "5.3.39-tuxcare.23", "purl": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:545bdefb-a0ac-57b9-bafe-d1b22abc1d80", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:9460f75f-86d3-5003-a2f3-17781e4220e5", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.23 of org.springframework:spring. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:13b7a47a-eb46-5cf3-a6d0-3796d68fd544", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:a2420f64-d23e-5481-85d6-a92b439158b5", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:1d6c07eb-e974-53a2-a226-90424880ad67", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:5c67663d-6e21-53e1-851b-4346a16e21f7", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:ed3a0e41-a9cb-508b-b532-16ac817c771c", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:878eb0d2-4f5b-5863-ba87-d7526129709f", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring 5.3.39-tuxcare.23." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3ed9cf0d-8c28-5235-8d8d-6711b7c40821", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:eafd3b15-6d8a-57dc-8255-adfc0c79ed9e", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:c9c29e4e-04e4-58ba-8914-22cf3fac51ce", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:25b64091-9caf-5934-ae71-b69756f98fa6", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:22bacd77-96c6-5525-96ca-f74f2827b266", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:a8ca62e2-6e01-5df8-8f70-03e5d4ccfcb4", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:0abd4783-6f3d-5945-a00c-91dc95f63622", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:1afa575f-62fb-5b5b-bc63-469413d0f8fa", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:aee8434e-10a4-52bf-aedf-71420845abb3", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:8bcae886-a08b-5944-bf0c-52be8bda147c", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:dc3692f6-c8b7-5c82-be9d-7ee90249552c", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:93a6557a-7285-5710-916f-80671345fdc6", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:2211fe2b-360e-5f74-8b0f-25dd026fe207", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:efa7a632-41e3-573e-8fbe-f251f08f3d24", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:a4318560-9b52-574a-8fa6-b99a1e2de644", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:252ba0c0-5e8f-5c5a-87d3-d22d2f0575fa", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:559784f4-8a7c-59d5-8fc0-7eb4d509cbc8", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:79268979-e3d1-56ed-8c92-5cc36e72365d", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b0fea852-45c4-5424-a407-2e51fa506198", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:d9dcf64a-b548-512e-9318-e3c8164b66ee", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:11c68d2a-c2f7-59d6-990d-69d6ea26ed47", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:4d91f308-4e2b-54da-bd98-cae0b4607a3d", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:5ce27354-ec40-5bdb-a2d7-da5bb874390f", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:a00bdf69-6792-5415-804e-76f5e09804c3", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:63960afd-69a7-5149-bc59-5e2f31947af7", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:480dc9f7-fa4d-5ad7-96c6-2a5d1ac96240", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:e67065f6-b9fd-56fe-89d9-47a2b04ea236", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:cd80d023-3180-5734-85f2-94e3ff20edb3", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:855da900-a0b6-5338-aac1-2f721a77c179", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:2fa320d3-acc8-58bf-9104-e83b6682578c", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b25d1328-66f5-5287-a366-2b85833076f5", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:e94d1766-83e0-550a-b524-d54a3b59e824", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:541d19e0-7dc7-51a0-bfdd-378c2c3b1ec8", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3a4f17a6-7eea-5310-b245-ecd8a3c61f01", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:ec0ed550-489a-59ad-9c83-e2104b44e93f", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:160a89ec-04f7-52e2-8cdf-48327bb72e03", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7a629ebd-8e0f-50a9-b200-dd63d2c863f7", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:fd6553c0-4ee0-56e5-bb9b-ca8425ad2b97", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3e96dc63-0086-52af-b9e1-e978d97442fd", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.3.39-tuxcare.23" } ] }