{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fd8799f3-c22a-5ab5-8f4f-176b361310c3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.3.29-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1354ca22-306d-51ca-97f6-1f28975ff281", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b962a1f4-818c-5fe7-8edb-f882b4d0a12b", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f04e29f2-93cc-5024-a87d-bbca81198070", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:49c1790f-0b0c-57c3-9fef-be0674723a45", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:31d9f399-f711-5f30-a9e0-f8a81b3f4092", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2a94b110-2880-52b2-83fa-a84426b6d5ca", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:899fc21d-3c25-5e77-a59b-5b42e24aae52", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:653d88bb-69d3-546d-b1ef-1149536a46a5", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5aa01714-a1e7-5657-ba5b-8542656f6343", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:35a406e4-7a0a-5787-b612-7801edfb6557", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cced128b-4969-50b0-9af9-6031aee504db", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:19d1441d-93c9-5433-9863-44386f89918c", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-beans 5.3.29-tuxcare.8." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4a7d474b-53fe-58de-a0f1-2bd7f969e8ce", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:645c07f8-f5e6-5a69-a107-f8c12b8e14b1", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dfa652e1-40a5-5dff-89a3-418b531947c6", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:07841a06-f206-5fe1-b731-5b8bf8a9f2c4", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:51a73545-21fc-52a1-9b38-9be2d21fde42", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:394c1abe-b77c-5b6b-b373-a9a77fe1340d", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8fb8699e-f647-5a41-ad19-318c9ca61376", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8015874f-edcb-5fce-9eeb-b08d11e0167a", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6e21dcff-463f-5fa3-a822-60253afcfbe9", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:49ce6c03-e96f-5dfa-929f-cf39d9b1ad7e", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:970001b4-1e60-598c-ac21-e0057b5f4683", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.8 of org.springframework:spring-beans. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:50f53ce8-b595-503b-afd8-d215a15b6273", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bf927b2b-069e-5751-a36f-b2da578e6dad", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fb12e1c5-8334-5b3b-b212-172f87ded252", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cb805d50-2558-5ee9-a5f3-75e4b9aaee87", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e96aff5b-2f79-52df-a431-3c3cf06aa014", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:201aae09-4819-50fd-a64d-8c6e03341724", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:01bf1b4e-74b7-53be-9ada-34ca4d4cb69d", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5b1d81c3-7591-586a-a9c1-b344f6e6f683", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ed792622-7530-5b63-b364-4b8e8710b773", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1a9a0fd3-5678-5025-a827-2e9e907fffcd", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f2414104-45b5-5b86-b77c-438c40661fe4", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:08737ac9-3de6-5d5b-9ffd-123230e51468", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e0287c0c-a999-57a2-a6f8-5e5f36077f7d", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:33de282a-adea-5045-ad5f-eed98a0d4814", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c3e79f63-e710-5988-8969-e432a46c9c39", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d8e48fa2-19a7-5bcb-b008-07e16078ab7f", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:90bcf517-d70f-5498-bdd9-6a24f68ddf18", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:631fc165-5fd9-57ee-8f05-dcf424d5e00f", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:375e83c7-e0f5-5e0f-9f50-ad016b93054b", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cf12d723-2929-5b85-82af-2e5f3f3546e5", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:98b4c8bc-714c-5ae1-92dd-b2077ea44cfe", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4c63826d-375b-58f6-8514-f3d5cda9f106", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f8c26e86-7f16-52ef-af0a-c3cc085fd5f4", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4879df41-fd52-5925-b662-23266d13f1bb", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4d48af53-b15b-5db2-9071-47374756c587", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:02226694-a57f-529c-aaec-e59d0b4e26f1", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:da473212-47d9-5a32-87ec-25a4da73f040", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:14f9fcc0-3b5e-585d-8175-8206cd60bc80", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.29-tuxcare.8" } ] }