{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a59eeaca-8b7c-5e23-b268-ded2fc7be608", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.3.30-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:45257f7d-7771-5943-bf37-b6adadc7a2d7", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6ee62028-b9e0-5ecd-a93b-415aa4eb84eb", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dfdc36be-9e9a-5a25-bcdb-4984d54694fe", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f425488a-d887-5555-ba03-122ed500a06e", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7938f91d-6c52-55ed-ba11-769f89589ec8", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:646b9755-6563-54f4-a3f6-2a8825e9b281", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6131b1a4-0a71-53c0-8716-50a4574d149c", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6271d6b0-7717-5572-afde-86cc82744bea", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:35a9bc29-1bd6-5b2f-8249-235a2a784752", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cb6d551f-26f2-5c4b-bdac-150bb3e37487", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:db0c9dee-13a8-51ea-acaf-a87b443c0ef5", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fa1c9532-b7ff-5a28-8aa8-a1feaa58adec", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3711e47f-0210-5afe-8a74-5d88f6802995", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:826bbafb-8bf0-5b27-998d-25fd94c8b5f0", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5b363cde-30e4-5b5d-83b2-44d4a1542534", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:34f438c3-d7e3-541f-af61-b02f69e88404", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1ca357a0-0240-55bc-bd66-b7c523a3b2ab", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:093b7f46-8660-5fb4-962a-96ca335e1365", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:056e5817-ca57-5165-b667-b6c132cec4d5", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:af19cba7-b62f-5242-812a-6a2655b0fc6d", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bda17e28-6ed5-566b-b9a1-4b92a5f5c325", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e8bfe5f4-2644-5669-815c-d6d44b0f2ee4", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.8 of org.springframework:spring-beans. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a074c4a5-ccd8-5d9c-b6f1-da389ed40e06", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e7bf5ca5-0572-5e87-b22e-c5d178b3810b", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b03b3f2e-0030-5d38-89d0-e6a1f7a7398f", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4865b479-e600-525d-a9a4-055e23897697", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4cb96199-be58-5087-a7fd-fa1d107fb955", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:99811f4e-f42d-50a5-adbc-70bea373cc1d", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:99c24e38-f748-54b9-9106-85c97a4096bf", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3f53391d-842d-535f-90c4-f66bf8dc4546", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:735ae29b-7f2b-553c-9395-abbd3438358d", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:966a5859-1266-55ca-968b-94b94cf7cb1e", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4a3e9aa0-e66a-57bd-8983-04150aaeee58", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:eafeea4a-2874-5c85-a25d-964f7126ba01", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a2e401d2-dfdd-5dfb-a15d-7a591b21aa4f", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c7d5edce-ec35-598d-83e2-ce8d258a5538", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:08a2f163-17e9-53fd-bb36-9251c6b7abda", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:735b4941-0670-574b-b18f-a43c1a2b3504", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7ed5583e-dc5d-5f48-9c44-db58246652c6", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b639f1e6-813e-5571-b1a8-33a8b3d44066", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a7fcddc4-c320-5fe6-b51a-a1208c43f40d", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:08d66a85-1cb1-5d1a-bdd6-7b38af4bc7c9", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6e1e4bd4-edff-5add-9c9a-9bd745f9cd7f", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:68a7dbd9-5121-5f06-a25d-5bceceed8787", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:56c67a2a-d398-5641-bf79-ea8540fd1048", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a9ff9b53-00ef-51ab-81e7-4636e10e8ed9", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:52735f49-1222-5c4d-bf59-2475e5629d21", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c6bf6069-2053-572c-bb4d-90693448d880", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f2c093c1-1ff0-5332-bb55-c4f22241ab55", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b744e23d-4788-554f-a48e-5d1db129e407", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.8 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.30-tuxcare.8" } ] }