{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9c19e80c-8f17-5e43-b89b-976fe475cc5e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.30-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:fe2b366b-7ffc-5bc8-8608-39fbf8a416b1", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7d46e82b-3116-56bb-b704-ebae46e74d65", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:72213a9c-1c49-59cd-a0df-425056121db3", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8d4c163c-3db1-5c45-9c79-5e10df2b6255", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f30307f5-7c49-55f8-88b9-03e4fed0ce05", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d8e2b65c-6da2-5aa4-868b-8d818cf02180", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:999a5c48-89f3-51ec-a08e-0f420b355c3d", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1bf6c46b-980a-5306-939f-e2be6a885e4e", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4dcd15b1-1540-5baf-af24-fbf106c852b0", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d8d640cf-7c94-5bee-9ba3-9cb1583d00e5", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1b78a46c-0730-5ed4-849e-071769b1bc6e", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8334e169-f74a-57a0-a512-a683f3b5192c", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3ff6b1d4-3c76-54ac-b0fe-6e0c618f721a", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:29d38e8b-0d2a-5892-a448-561e7ca1ca15", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:40cf9d05-84f4-5535-b72f-d567f3d57ff3", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2ea85803-f67d-546c-97d2-8f7c3cb81981", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a81551c3-e911-5bd3-9124-26d981a2811a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0f154ef4-17e8-5530-9d55-e3f043911da7", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c101f063-46f6-5e2e-bf2e-17347adf0698", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:deebd74a-6b40-5d97-b501-d7e70d0f3ebb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f6965114-f08c-538b-8685-3a35774812b2", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ab42ca64-18ad-5bbf-a88a-62683c794020", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.7 of org.springframework:spring-test. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bb8c4ea0-539c-563e-b667-e09a3df8f76a", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c2fab9b3-3888-5507-b919-a44b0e748741", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fa5d8cb4-2850-50a2-bd7e-fc4594c0a658", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f1de2130-061d-5403-9b6c-606d6533b4a5", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a735ca56-a6e6-58cf-9c43-834b0478e9af", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8e18e37e-467c-58fc-a9b7-5dad2491d3ab", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d80d4d18-36ec-55af-baee-ed4a76fbed42", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:da9f1649-8d7c-5405-8bc6-297f4d4909be", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ccfa2626-abfb-5a62-8453-b632cda1127f", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:18279a67-e941-5bdc-85c8-bebaa3979bf4", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1d6029e1-578c-5229-9474-a714d6f810a5", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:debd9b08-703e-5678-ba4a-1efe2c8731b8", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5d413bd3-18e6-543a-b21b-6d495539ba22", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:331739e0-b5ab-53a6-941a-e7f3a2340e96", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dce36493-8075-55a3-b7fa-09d740330a6c", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0aefd46d-949e-5a17-898f-be5ff2b69a6c", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a01270d5-eeb4-5585-9119-65bf8f40a3da", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:64811c05-6d86-5b43-ab98-68aedee192a1", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:64d0d6e5-bfe2-5bc7-9701-612ee9da8c8b", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e5bc07ed-475c-5b42-a4ef-a49733c83e56", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1773d9f6-774b-57b7-82c5-17a323cf9c47", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3f4654a3-e5bc-554e-9555-bd317a0d761e", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0b85e4b7-b3d1-5bcb-b00a-5dc9f90ac52c", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7483299a-fa77-52cd-9f84-64d9b887f728", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:16e8da4c-50af-59d8-9378-612a511715eb", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b47edac8-e9cc-5761-a334-a8458654f12f", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:605b6e47-2fc2-5d0c-8c4e-5d7f8c5382cd", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3e32643b-cd9c-5e93-a4d7-1529a831c8ba", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.7 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.7" } ] }