{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:63198c54-9467-5b10-bdeb-4cd4bed1463e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.3.29-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ba97256c-a083-5f6f-9388-9dfdec9cc057", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ad6effe8-ed7b-50ec-a7f6-3e12f69467e3", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:56cb0d18-f8cf-5824-9e97-a0b2b4f5c3b1", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:29cdb6c8-6031-5efa-902c-771f479052eb", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d1de3479-36e2-5a41-8c37-87ed24f3a45a", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:612683ec-d9d1-55c1-b8c5-338903ab34cd", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8d3f1bd4-f055-5476-b828-92fc09c2fd85", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:26edd693-d5da-52de-9940-067562289d25", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ccadc06e-71a4-59ea-a9ec-33b4cc4a9b93", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:154df200-d45c-5a34-b847-d2f6e2d3ced7", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7cb7a77a-0b26-5516-8327-703eab6eb93a", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e7dd04ba-846f-5e0f-b2d7-1aeb9410fce2", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context-indexer 5.3.29-tuxcare.8." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c85015b5-7249-5d4b-925a-a7e596113727", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9dfcce5a-7e68-568b-88c3-c7728ac23065", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:367c478d-4aa0-5106-b39f-4cf7524210f1", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3ccb90ed-2c0b-591e-8d4c-7fd30e099b98", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c4e0bea1-1b82-5c3e-97c1-a8c43e565d4f", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3d0cd28e-1bd4-50ec-8b25-b79883eb204e", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:190e022b-8ffe-548b-a2c6-2c1c525c35e8", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0d39d844-d280-582f-a2fe-621709ca15d2", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:67416bdb-361c-526b-8d78-f989d38ab486", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c47c8ec7-4e7c-5c40-a0f9-d8e1c7897ae8", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6d6c658d-2ee8-541e-bd60-fb4120072cbe", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:aa269eb6-e3e6-55a3-b056-c74e69d79e9d", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3d25eff3-cd3b-53a5-a99e-c652acd2f26a", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8cda5730-81d4-5ea7-bb71-380bc918995c", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c280c141-fce2-56ef-82d5-c3446549515c", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e47a5278-1ab4-57cf-8555-3fc809250e9b", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d3cc1920-8737-5ef0-89a7-f252f1a67c26", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:73d7729f-6e8f-5013-b445-40583eea1ca8", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:87cea6ed-5258-5449-b8ef-d6fa20215594", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6df1cacb-1f9a-5657-9205-68a8a6082341", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1869647a-3a1e-5baf-8a01-5d2687dad6c9", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:de67b461-be80-5250-8720-66749805181c", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2c3ff9c9-0749-537b-b8b6-676bc9edb262", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6a8b0f1c-4456-5282-b7ea-b77f8439e31f", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:429177b7-8e22-53c1-b4cd-cb1661064156", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f17bd301-460e-53fc-aaa1-7e81f2c48d55", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b38e3a18-114f-57b5-b35a-e378529eacae", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3c32ddcd-b005-5a6c-9824-0e7ac39fd7f6", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4fcf7dc0-db11-5557-918d-d1253dcc4c6e", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:81a587d7-e94c-5494-8799-162c53bd9a90", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:696e0894-355f-5b2d-8467-aa2769c5038f", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:570bb1b8-ba6e-5c68-aef8-c2aa25d92d73", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9d1c6dad-af5f-5e7b-ac44-dcdc412a26ea", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bda63703-dab1-5374-956b-ee4d9190026d", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:09cba036-4243-5de8-ac24-6bff28158a52", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a8b52c41-25a6-5cc6-9dd9-43476bd65480", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d1679308-b160-5b37-b048-3d2eefcc986d", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c34afc2a-e2f3-57b9-8cbc-a0da6a3a8858", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:998e9439-7087-5973-bb1b-b249f9558c78", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.8 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.29-tuxcare.8" } ] }