{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9df4c51f-850c-54d5-916a-edeeb63d3f30", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "5.3.30-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d08cdc1d-791d-5955-93ea-592a5c4c21a9", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f26eb9b2-ccbe-5729-ad00-26e4717bfa95", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c1893f0f-c4f6-5ed1-8c81-e909bcf9cc3b", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:28dd31d5-c167-5d2e-aeda-06bfc2d7e18e", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a5dd1202-3127-5118-b815-72988da04359", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4329ba24-176d-5706-97bd-70af64c046d7", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d4c60dbe-b4ec-5866-979b-d9b73ade74a8", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:95cd9ceb-1db4-5b65-bb2d-e95d0b1e5654", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:04582a02-e362-516b-b31a-03a2b1bdf5f6", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b5d82e51-b534-5006-b9d6-010f9f4307e5", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:355bdc89-b8d5-58fb-bb11-12b1d9dde2ff", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:57d54885-be71-5aef-bb65-ca57c889acca", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:85239098-4a40-5a83-84aa-98b2a255fcca", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:135040ba-3630-5417-aa6b-23ea90508c64", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c7367c52-0e5c-53cc-8466-0e7123f03734", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:135cb910-f834-58ac-a0d5-25c111f2f30d", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9060eb77-e015-5084-b04e-af1910d398fb", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:28eb60f7-13b1-5fbd-90f0-46ae404209e9", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a9007cc7-1b95-54c1-9464-11433be29291", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5f55cb4b-35f4-57fa-b103-ed93641d5b38", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9634bede-085b-535a-b6ef-2675f2525191", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:aa4c98e5-928c-5a4e-893f-041f8dde6ee7", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.8 of org.springframework:spring-oxm. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5a68edcb-48cf-5cca-8d8d-ff444ae165d5", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:39ab855e-99a9-5151-ab90-39cd6595a250", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:004e6728-9c82-5ecc-be79-c1baffeb7323", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:deda6dd7-656d-5336-9916-aab59806787b", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:85d6b3b5-e3fc-5770-b98d-4b3e3c14b96b", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d94f8cf4-6b22-5990-bd2d-ac067ee69bbb", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:10de9bf9-fc16-5095-bc8f-7fef7eceee8c", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:341021d6-dfa0-56c0-84ea-35b9a432ff02", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:09cfb80c-d4e7-5f0d-b291-e6267b0afa74", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e90630ce-8e7e-5e73-bc02-f8578abbbddb", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f67d46c9-f69a-57f9-921e-6f551766d7b8", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9973a11a-f452-5a9c-81c3-ef6d1b50cff1", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5db89f7d-9eb9-524d-8081-d2242c6d7e73", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8e6cebec-b8cb-5939-a91e-601ebe790b55", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5e4032be-71ea-5415-81e4-b6a383d3d9b5", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b05d90f7-a514-58b4-ba40-bcd16c8bbe83", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3287ae44-c522-58db-a5e5-a16af2360097", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:91f70630-edc7-53f2-b8d8-8a4968e5fa60", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0a992c99-8dd7-5255-9f08-95939236b513", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c98b6efb-2232-5398-8b52-f648e0805cb7", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f4a3ff6d-d0bc-5353-bc0d-010f752549e5", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:38e4bb0a-17a4-53b8-bdd7-a73e5c6c15b3", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:df9dc4de-7355-514d-9c38-b529c37418dc", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b75ef37d-d2d7-5d09-ae36-7b417c336c8c", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c085c98f-c444-5bf3-af84-b60a9c236cb8", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:169cccda-c8d0-5e82-97bc-10e255ccd418", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ddb05b2e-4397-51f1-9338-8218cb11cb43", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6c8d57b0-ef72-5bb6-8684-4462d4f8851e", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.8 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@5.3.30-tuxcare.8" } ] }