{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ceb16a3d-80b4-506b-adc1-cfd14320a27d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "5.3.27-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f848a287-44b9-5420-8f43-3f98b7a8da89", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:efc70bfb-bd7e-5658-92ac-677bbf0728f3", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6166d8dd-0cda-5a54-a868-136596c4677b", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:93627524-4349-5660-a043-fa528180803d", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c9c71f2e-1436-5c0c-8a97-7acc914d10e5", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a192e630-a84e-5ff7-aab2-56bd5e4c4231", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b07753a5-34cf-5310-be36-ae94e180e7dc", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e5e4ffc8-f03c-5e5e-8890-f8e09e079bc6", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4f02cb75-544a-5ea4-bb04-4760aebcf091", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:72b2079b-1dd2-50b4-bb86-479f7cb0ca97", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c507f896-747d-502d-b391-3055095b89b1", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6ae2f9a4-645a-530d-92fd-74b89c3aee59", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-webflux 5.3.27-tuxcare.8." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:97b4553c-a15e-5700-aaec-450793e53fe3", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e0823d73-c3fb-56ca-a58a-0c9117a16f5d", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:29499493-e351-586f-9ec8-9a285887248a", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1e72fe2c-8583-5276-834b-ac09d8de3725", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:48967d1f-f4b1-5a4e-a0a3-100f5d6e9d26", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:57968553-a418-5b88-91dc-5fc0cebf0ff1", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2684973a-9532-555c-880e-53e939b3f2f9", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:557b60fd-6418-590e-b8e5-209cbc246e68", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e412da83-a9b0-5c14-919b-ed3cf6c89e5e", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8f2f8173-979f-572a-9dc5-34a5d5841c70", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6e84adfa-38ab-5845-aee8-1ce5f848c971", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-webflux. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b110c03f-7cdb-5f20-b264-24746511b534", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4cf6bb88-ad1a-5481-ba48-5615c05b4df3", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cc524393-28e8-5ff8-9cd3-4049b4a5dbc5", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f373be3d-89a3-5323-a6ea-d9c2fc2fbcf0", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d4b4d9ea-fa6c-53a7-a7e8-dab608185132", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1d94f228-b206-5339-9e59-2261682f7b2a", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0d091e13-f8bf-539d-b43c-57e1bafa1779", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-webflux. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b64a7228-2c2a-52e1-b693-c9d6366e2e29", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0c255354-65a8-50dd-b0f8-3e6f6671a879", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a4881dd7-457f-5f4a-99cf-15708f627b30", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5e48ebb5-7d87-558f-abb1-8599d1f7d549", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9b14fba2-7189-5984-9114-c2acf9a8cf35", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c3209862-874e-5d6a-ae8f-0e558ea9c0db", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b751ff6e-5830-5b51-be4d-701c30c5b33f", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1cc504a5-b945-5b01-b859-636e1704d3c5", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:17ac84d8-36fc-50a8-9ae2-719b1b0ff7c5", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:64b06d93-6e92-53ce-9a0e-4c80b036766c", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:57835f2f-ca45-5dd7-98d5-4feaf3c97718", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1df9b60f-fc51-5988-bf37-3425ecf9eae8", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5256be95-f4cd-58ca-aee2-9a660e2ce262", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:409250e0-d7d5-5531-aa9d-dfeaf083b5c8", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0e2d37c1-027a-5a70-854c-e9551fcf7178", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:eaf578bf-4a31-5e49-a6b4-798558928337", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4fcb6e0d-2a7b-5a30-ab57-b9d3428db93d", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3a799d5f-ab9c-50d4-a8a3-3c79bda53697", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b75dbe16-ebdf-5eed-8155-5da213aaffb8", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e8528e27-7589-58e3-a3c6-2ee20f549b85", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0b47fdfd-ab05-559b-9c49-70715cc7496f", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.27-tuxcare.8" } ] }