{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:16f305f4-7ac5-5d18-9ac2-734bcaef4b50", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.3.29-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:aa0b1add-ad6c-5e2e-bbd2-2cccd64de467", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4bdb7004-ecc6-5978-b833-3083238d34ca", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ccf188b2-bf34-5551-998e-07bf8c27096d", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:484c9f95-3c6d-57df-bc66-11d2f9f905ad", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b1713c3f-539f-5d7a-89e6-0db1799e617b", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9d6b6d59-06f0-5d1b-bc68-54540eef9b75", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c096bacb-2f4d-599c-9e82-e658d9afccbe", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:57c0a66b-eb9e-5277-b2a5-a3b47e923a1c", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fa016439-fe5f-5a68-b743-e06ccacfa034", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f0356f6d-31b8-5d45-84dc-8458e1f81e3d", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0ffbd9dc-86b9-52aa-ad73-92f8555ec87e", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:91f51e4c-ba2a-5929-af29-62f4fb08d915", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context-support 5.3.29-tuxcare.7." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bb3e9cab-af50-5391-8803-0510dab944a0", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2303b204-a9c9-569b-b83d-a0f14c36b0de", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:193ee9a6-a919-54de-9bb4-234e9abc384e", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6147a450-e301-5df2-b17a-ff28ae64c29f", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8ce1fe5e-0ece-5ee3-aea3-8f4ab0c36bf3", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c9301191-d03e-5208-8928-2672eb8ecaf5", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e00680e5-d34a-5d75-8b23-54769d2bfe8a", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6c8db0ce-65d3-54b4-80a4-b95bf7d5bb19", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:92d88efe-da16-52ff-8dff-e5eb8117adf3", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e26216c0-04d1-539f-a506-4e7bf21c0870", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:81ccf2c8-6315-560c-89eb-ea38b0283e3f", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.7 of org.springframework:spring-context-support. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:286523ce-2063-50c9-8521-a9619b72f565", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:564818e6-c9f9-5eca-854f-2ed3241a185d", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:77cff6a7-13e2-58eb-8757-2bf6b495c2b5", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a633f720-1dce-5d42-8437-125316c357ca", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7b8b0c38-d0e3-5975-9d36-d7720a68faad", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5dad3d3f-1cef-5062-adff-6e45a5ebf755", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dd21fc33-52b2-539f-9462-c5d5d3d8fc3c", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0da69a35-9d62-5aec-aa6a-6be5408aa259", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5b124ed3-6452-5fcc-8140-398fd9b87561", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:56f11c50-cbbd-55c4-8a11-68d2c06a6ccd", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:30006f72-e404-533a-bce3-69e3e0748a53", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cbd36aee-3e4b-592e-bbd2-a4790cf222e1", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6eabf827-117c-57cf-a1b4-00bd90328c2f", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:80a525e6-a663-5d0d-b66c-85ed685b1365", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:147bace2-9393-592e-8917-e8ad1b41a189", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0a831f39-16c3-5eb9-8c87-d9f1bc54e6a4", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:27addf8c-f8a2-59c7-b4f6-4f75745e6c9a", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:be87b14d-7cd6-5769-8729-5a1af2636b9f", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bab3bdae-dfdb-5bf4-89f1-180966354ae1", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:38824bd0-4688-5072-85e0-9a0e41c22188", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:81b44bed-0bf6-5e14-9d0e-f0c30ae8bb33", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3cec791e-0ac6-56c8-82ab-4533e580e139", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:481719b6-8871-5c84-aba5-cbc8eada68d0", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:aee0020d-b601-5ffb-a4ba-31199617aece", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:43dad5db-a41c-5daa-b647-73a6d198c1d2", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:957fc9bf-03b0-556a-ac06-f114a77fa85d", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:202524a4-df14-57be-9aef-f28509b171e7", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:de0ab010-f085-50fb-a39a-bdf3379a3017", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.7 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.29-tuxcare.7" } ] }