{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bb53f3c9-c2f5-5cde-b221-8ef03623eefb", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.3.39-tuxcare.18", "purl": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e575de2d-4475-5af0-837c-3d3e896a6127", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a9bc591a-74e2-5644-a367-3c7e5ebcf5e9", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.18 of org.springframework:spring-beans. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:ee1a9b59-57d4-54fc-b0f5-601fa9d559a3", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:1179eab3-5ed8-5b47-91f9-f9200a29a92f", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2fa9cb3d-2ec3-5bf3-84ec-661d6ae8766c", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:24eb2df3-71f4-56d7-a25e-5db34f6433de", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:1dc2f6eb-44f8-56c4-89ab-51655acf5f43", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:65f57665-7264-5623-b30a-3798b1926435", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-beans 5.3.39-tuxcare.18." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:80e6bc51-de83-5d26-a4c7-d5fcf6703c1c", "id": "CVE-2025-41242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:46b11bb4-abbd-529b-9854-8310a4088314", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:23080d17-6ab3-50a4-b754-59af14dd3132", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5d7e44f6-839b-51c2-8f89-2386ef5552bc", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:5d1e8f39-ee24-5e73-91cf-48ab6fc21957", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3c2a5779-0c4b-5498-8ad9-784e85026f97", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:3ed5b3e0-be2a-5499-b05b-5f5b2deab98f", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:e23e4c53-256c-57e2-b49b-03f03a94453a", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:d79090e6-43d8-51fb-820d-8da177ad5595", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:ba9f47b1-2c29-5740-91d8-3fe121f32c46", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:02efbba5-4439-50fa-b3d5-f864e4dd9e86", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:eacbfbbc-6c88-5ca1-96c5-318c69b743d5", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:4cdb509d-e73a-5060-b59b-07d8f27780e6", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:85f2f4d2-50c3-5fde-92ca-547da7a13b5e", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:49dbba4d-f971-563b-b8e7-ce8864fb41b1", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:7dff1dc9-6845-56c0-b900-c66493f1c283", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a7baf8c7-63ec-53c0-b286-f5f63c858021", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a38232c4-24f6-5556-b129-bf35c6777193", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:a65d6d27-8135-5f17-9ea9-6d2c99f84e53", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b99ead36-1951-58ab-abd0-bc2af32253f9", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8c8f0894-d81c-50f9-89cd-eef3b40950e0", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c85f0068-493a-59f7-a8bb-ca88e84f7f41", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:0111a084-6283-58ed-bd8f-e759d3cefb78", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:8c14a2be-6e1b-5020-b817-7d6c607b8618", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:c106f3b8-ba41-5106-8016-c9d11a585272", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:6abedc21-70b5-5cfe-bbe9-1272b66cda3d", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:ed364d15-d77f-5463-baa2-7a2b7214b474", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:ae3f980a-8430-5397-baef-aadea7ce1d25", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:9ce72711-1ace-54bb-a714-6b3fd799f740", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:76a2739e-2db7-5af8-946b-7c53c8ee811e", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:f002cdd0-eebb-5e1b-a099-8c637d4e68a3", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:86768331-0dd4-553a-8dd1-6480e2dbfe91", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:253c11d2-ded0-5f17-8574-15d258f4c0ac", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b75f9bd8-5c17-50e5-b599-1b0da03b0b6e", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:b3fab39b-3feb-5f07-907d-7113f7d9a047", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:0e43e00e-a899-516c-83e7-18be68f6500b", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:2ff6d779-3dd7-55a6-b9e6-0d0cf0fe0044", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:009ea3d9-fe8b-56d1-8287-f75d89744135", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }, { "bom-ref": "urn:uuid:0c32ee71-6210-58d8-9471-8efa7734c315", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.18 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.39-tuxcare.18" } ] }