{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3835e177-f05f-53fc-8a76-f2b4b58b64f9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.3.31-tuxcare.11", "purl": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:52beb1d4-ecb1-59d8-8851-b483f3119289", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:02ecf6b4-1220-5fbb-b74c-c1f8b3aa079e", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5cf683b9-848e-5466-a163-f9aeb110e906", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c3b2f699-759f-5a53-9e33-a5143e417bd8", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b37b3436-0ee2-5429-93da-e6eddc53c72f", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:617b02fd-7b59-5d8e-bfc7-fc04eb183b20", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3e309365-d50d-56c5-8dba-f8338f151288", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f19a547d-c795-5cbc-8e4a-694122e8e783", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1ad57d0a-0a46-540a-b784-d1d228c3c35b", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:418c98f5-ead8-5698-ae56-371e53a02974", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b1968a25-8dda-57b7-ab67-bed052f1c556", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:09f1fe33-1aaf-51b7-95dd-d117192d1e78", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context-support 5.3.31-tuxcare.11." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:37907543-bb00-504a-bd6d-93fda9fa0639", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:86d34f73-ab68-5a31-9afe-33a0874f3ee0", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ce260ac5-6f60-5cec-b84f-953ed3fcd723", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2e1460cb-3555-5b1e-9873-954cc93ab649", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:05b0b8ed-11b4-5e09-850f-810191ead5f2", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:88ea863f-9d24-5d09-95f8-38ba4c938328", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:81255525-8a82-5b86-9c17-74a60afe1d8d", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:efc582d2-e79f-5028-9f3d-ad55346bc19c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f5d7c0fe-8bda-5b69-b002-14603db5b93a", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6792d941-c98f-50a7-b8a3-490f378262d0", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:fef5b899-46d2-5a38-858f-7df8192eb0d3", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.11 of org.springframework:spring-context-support. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:41a4079f-557c-505c-8400-f0dfa7e0383a", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5beec702-40ce-554d-a28a-6a0c615425c2", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7d7f1dc4-0cec-598a-948f-f535ac5d68c7", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ec066f30-dae5-5cb9-b91d-d013361fd2a5", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:9fb315ae-d991-519c-8477-c770f0c39932", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:01c5b903-f1a4-5e24-b151-71cc493d3a7c", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c51b8c25-97b2-5714-998f-584746badf16", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a5c9475b-930f-5d38-ace6-00e5a8a7f978", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cff929ed-49f2-5d21-b9b9-4aefa8aba569", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f91f3ca3-f627-5a0d-84b2-eb7a53fc8521", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0d03f99b-5a25-54f4-a33c-156f31cc1ef6", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c11cf37d-1393-5564-8870-d9efd9e51c63", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b6aebfde-7c5f-5f28-a3a4-bc421868563e", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f565b1a2-541d-58eb-8f5a-f1faf9ff9fb8", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0e8c7ddd-5fcb-57a7-8196-d9adba5929d9", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cbb60997-7013-5f18-9e63-7dcf0b81b284", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:bc936771-b1aa-55d2-869c-d4cb90f5b20a", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:067f1da4-7210-5178-89af-6cdd76efe91e", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8142509f-908b-50e9-973b-d36920d30302", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:97f953fb-462a-5256-a3c2-38ecc885a6d0", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b4f85ab0-5778-5f5f-9c10-61fff88f6e74", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:34918f3b-0fb9-5130-85f9-7a356706c1c2", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:fcb62760-1b3a-505a-9af3-fa4274701823", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1edb1e83-43ae-5a3a-ae02-f7ec5fa01e52", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:632a80a5-e84d-5cb0-9d8c-b5735105873f", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:bb2c34a9-6dd0-5fca-86c8-a2d3eae21f12", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3d87fa76-184c-596f-adb2-6317bfa15c1a", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:875dff80-02cc-535d-8eda-44c67dabe959", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.11 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.11" } ] }