{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:49c391b6-df9e-5f6c-9e64-ee7b71a53bf2", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.31-tuxcare.11", "purl": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b581aec9-37c6-5fb5-a292-2aec58372c8a", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cab23bb8-7fdb-57c2-89ff-00d62c6e7300", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f84e5c6e-6edb-5860-8eb4-9efbfc4d7fb2", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c6f8c9b2-ed90-5676-a246-cc1b3d8df214", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:132d8719-e2ae-53da-a954-409bce72e6d7", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:523869c9-c6ed-59f0-aeb6-b7d39776af84", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5a26c82e-99c6-5818-8843-ef6bc4eeabab", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:706b358d-0f55-5a5d-9c09-7687444c6a1d", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:69a9fc13-b9e1-5bdd-9e2b-1bd0f0c5c6c9", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b2be3310-4647-5552-a4d2-42296b71fb6a", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:599da49f-d865-5c8e-a622-b9abcb11c818", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:137528ab-d32c-5f5b-889a-c24de57ac399", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-test 5.3.31-tuxcare.11." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:05f2b9d6-6d8e-52b5-983f-6a5278265af0", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:71139042-cba5-5de8-a901-2eb894e4bbcc", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d97ecbee-d04d-531b-8417-2ab42a15c51b", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cdfcdcad-d73f-5e8b-b772-b9db2f771ab7", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:30125180-57de-5110-b505-1c11bfae7c50", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ccbe2a3b-187c-5cbc-a2ee-8e3cc134559c", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3d39bb46-4651-5708-8e60-3eab1d318060", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8edb0995-501b-56d2-ac5e-bf5375aa6b13", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4aa557bd-6745-51df-be93-29de0465873f", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a65ebdc9-60c8-5bcc-ab20-64c8b678650a", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e0836370-955e-5491-a75e-d9790dfcc394", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.11 of org.springframework:spring-test. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c8dc2ec0-68c4-508c-be7c-f356bf104b49", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:36baa910-a943-526c-9072-3f70ca6c53be", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d5320406-27b0-5bee-b1e4-42895ed578d6", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:606799a8-9999-5948-b50e-89338482a4f6", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5508dc5a-7ee6-5b8c-9899-dd082f592b7d", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:891fe37b-1edc-50f9-9a03-aed489f1bbf9", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f81b5c45-6912-5750-8e1b-18957e783628", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3a8db91e-dd7f-5fc3-b649-eefc9958e00c", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4f3a9bc5-b480-5129-aa11-dffd821478f9", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:66eb7aa5-e331-5ec0-aca3-071a532c5561", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2797c8bb-35dc-5eb8-b9c1-03e0adb13daa", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:734f1803-63e6-58b3-8841-10ba78d9988d", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:885bdec7-6bcc-5cd8-969b-5305b87c9a50", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e05a2583-3978-57d3-b12d-b4ee5cf07046", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7911bc28-ac10-5eca-9a9e-b2c95a9fde11", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:752cfa22-aa54-54ab-82ef-be080419e548", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:dc9977fe-2e4d-5f92-9352-99b4600d3fd8", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:87f7e679-4e93-5dc2-aef0-f582a9ff8ecc", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4ba39475-004f-5ed5-afcd-6f4265469370", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1cafdc23-948c-51cb-b1b5-0481296f6f92", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:12a1f30a-6a8d-5360-a16a-c16caaa3cda7", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ad10c414-8051-586d-b204-d679ccd5a230", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8cd5aac5-d240-5c6c-9597-5852c44b422f", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:72e12c84-dae4-5aab-bc80-f7751437b8d4", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:15d2327d-33aa-51fa-8a96-6bbe2644a642", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:86f2b887-b82b-56ca-b047-b4282bbddbcc", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b027b831-5a8a-588e-9209-da69879530b8", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:60e5be3c-e6bc-51f3-9fcd-5af2d5e366ee", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.11 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.11" } ] }