{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:17cd1301-b66a-54da-91e3-38a2651e2c2e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.3.29-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5dc79c6e-97af-553d-90de-3b87370afe78", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2569232f-4240-52a2-b68b-2397c8097a1c", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2cccab9a-85c0-5f03-abad-024924973b42", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a44ef33d-fc3d-5a9c-a25c-c71be87bd0a9", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d97469a1-cab0-5b0b-86e0-51abfdacb002", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:da2795b2-4adc-5ee1-96ab-350ecf5c604a", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f4f8c8a3-9d28-5033-9790-14f31281c060", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:73c599d1-f5f4-5090-a040-81e165cf0852", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f98255b7-283a-5a58-ad99-7ac3f1e695f4", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3b4d675d-4ed8-5cae-bb1a-b9fe248a7e06", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e09a705f-6d12-5162-b29d-fe11295c2805", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:40594413-72f0-5c4c-9011-0675484e68c1", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context-indexer 5.3.29-tuxcare.7." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7a90c761-c3a7-5959-bf44-bf7856f6dfcb", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:05753c50-727c-5be5-ac80-a8d2b2cff6ce", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:62d200c2-8065-5b7d-ab2c-0d4efbf04472", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6a753f5e-5d3f-5e63-bf92-12aa82695cac", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:668eb994-8762-5744-b6e4-f0723c78da04", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8f5c5715-0311-524b-b662-2f3eb36b5bf0", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5820792b-7043-58a0-a7a5-3bee432ed352", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6230cda3-006e-5c91-b4c3-539a6c0931c4", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5b2b2333-7716-502b-99b8-e073b00c21bc", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:815a59d2-bf07-5d71-a858-0aa9dce607a6", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ec1268f4-fda4-5812-94fc-d722cc288f05", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3a9e59f3-7518-50fc-b20b-05d036ea1c3b", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7c5017da-1d05-5661-b30f-cf1e56ea6cb1", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:98c971ae-987c-5117-8eef-e328c6b2c84f", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e03b9172-b677-5d79-bcbe-511588d00ae0", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3e522567-a9b1-5265-a003-178991011cae", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4de16fcf-6c2f-564b-9198-fa862b0cf59a", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:133c59ae-babe-5aa3-9375-c190e6f3050f", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:906335f3-adc0-56d1-978f-3fe910448ef8", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b418ccaa-6bed-54f1-8913-72443cad490a", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:43e80358-d9c3-5f43-ac5b-3f7a0c603ea7", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:71c1196e-dc05-507f-8668-86b9a9088c19", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c7c13461-2f17-5dd0-ad7c-91fac46ca463", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a5f84b17-b3a1-5bd0-9782-d2942c99c27d", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b44bddbb-f058-571f-a1d6-549104975182", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:332a5ef3-eb58-5871-b3e4-f83a0492c2cf", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8d6ffaea-9077-51ee-881c-e18bc345513f", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b322b584-a525-5a8d-a0b2-9287761d1150", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:58c11b35-0009-5a66-864e-7fa67ba319b6", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b01ae670-1324-59cc-8f67-7bdc0d0b55e9", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fb6b6b6a-f415-526f-8270-116a8e795f56", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5d1a9fc5-bbcf-5aa8-bce3-d17a0d42e774", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:65dec71f-8d9e-5ab3-96c5-aaee1cb3af00", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4e8328a9-5f16-5c22-81a3-4a364b4c6382", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c83d9d17-2f46-5143-81db-fb44acb42c3d", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8a7e812b-d05f-58fb-a552-3c0dcfe192c0", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7a1ab9c8-d292-55c1-916a-dde879e1e842", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:03d1baf3-ff6e-5354-b1da-658f89d15053", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b4bcce01-74ed-5cfa-8ee7-a4a99c9e0aac", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.7" } ] }