{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:af4d7893-8c45-5403-9743-fef3f7c08d5d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.31-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:59bbe470-a36f-53e2-b347-0770650b8aed", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9d84c741-1134-545f-ace6-6ac7ab3231a6", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2a5c892f-a8a9-5ef0-bd79-2cc61cb6c520", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4e4bb2ec-c3a5-5933-8e5f-10381d835566", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e9e48110-e606-5b98-9bdd-c13877245795", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:817bcf1c-125d-58e6-80dc-cf77b20ca1ba", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:30378b23-e2c9-572c-90b4-a42d6484fa42", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9add480d-1fe8-57e2-9bfb-f364a2f74d57", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:15bca2fa-d194-5c5a-8e86-732d4e8b21a1", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3afdf651-1267-5c0c-a59f-f2f85253cf61", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:947ba2d2-3e6f-52ad-b428-6d2a70e125dc", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:353c6a12-19dc-5a27-bcbb-b5c6bd6f347c", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-test 5.3.31-tuxcare.12." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9ffacaac-51ff-53d3-baca-59c679f93ace", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:708d1118-4638-5828-95d5-dd0bbc37a400", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c325eb79-6c1e-586b-81cf-0ba2c054946c", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:fd08066e-6f38-5d44-a08b-a7eaa2e00936", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4b090c77-72cf-5af7-8782-dfb49bda2c68", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5cc1f28e-8658-5780-8a6b-07aa42ad2d18", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9bd9d7bd-ca3b-544b-8aac-bea4c59d09a0", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:68b23fa0-693f-5c24-826b-a2b48df80bac", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:937e54f8-a797-527e-a878-9c6f5e65e2f1", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d5527f85-0eea-51b4-943d-cca0d3119f71", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3a14501d-e109-563d-85e0-626c7d4d521c", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.12 of org.springframework:spring-test. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0297e982-bd95-511c-b6cd-370d616b0766", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8d66b76b-b73b-5406-8893-e09b175cffe9", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d060db48-9ce5-515e-8d61-a3717a7aa284", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6d94de56-f5bc-5961-a4ac-07d5bfc7e479", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:cc4a1908-9f9a-54ab-b86b-b9a9ce56f6df", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:40ea4337-7f3b-5f81-966d-0e67728263b0", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6de399a8-6476-5938-9909-a185c5406ca5", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7a80a97a-334a-5e5c-a921-2773315d2f3c", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:424e7b4f-faeb-5d44-a158-3e8b7edae3e7", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1f5050ce-14a1-58d5-b77b-1b93678d0f14", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:16911d94-07ad-50c3-aaa2-bf0d50f9ed21", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:870a09fe-277d-5486-a220-4c07bdc993c4", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:52aff688-705f-5b07-b32f-db082d3fe02e", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c92aa702-76a1-5791-a843-576acca8aff0", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:29b7f326-9197-566a-a604-82a5c1ad5951", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5f7ddbf4-f272-5864-9fdc-0500bd79ce34", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e0d2a860-7011-506c-b8dc-45bbfa4d04d0", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f328aeb2-9cd1-5f26-a7fb-37ce140fc9c2", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1796ba74-d2ab-5987-a70b-0b1aa6401353", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6cc7b014-8a95-504c-939f-bb30c20b23ad", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e3111a82-a30a-54f7-9d7a-c2b7a614c46a", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b307b6eb-17e1-51f1-8e0f-5374101d18d7", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e9f4d22f-0f56-5147-9bd0-0f6b0c43e49d", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:72881c17-878c-53cd-9b61-a1381c10422f", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d1029922-e092-5518-953d-094eb15084e4", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:55e32ec9-bf10-57a2-a766-563479e4396a", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5acab72c-4105-5e06-8099-265d9e6eacc7", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:82b1e242-875e-5d5c-abb8-ac17bd6b3a69", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.12 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.12" } ] }