{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3219297b-d3df-5acd-ad27-992c32667932", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "5.3.29-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:75d29cf4-db7a-5ac0-80b2-0adecd1fa427", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:240ec372-ab15-5927-a858-e2576bed1568", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1d5a29cc-3ea0-5cd7-a8ec-2c916374d872", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:edb97f10-dc2c-56a3-9b0e-7bd2c54332af", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5ced3161-3984-50f3-9b82-ca35f86dc8f8", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:58d81448-3a5a-5614-9baa-769572e8f985", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cebd6075-68f7-5849-a182-8522753e9a78", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fe0b1fc0-96e5-545c-b242-6a42fb262859", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c68ef7ec-ffaa-5130-b349-b1a44a77c841", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dfcfa5e9-37be-56e5-9550-91282dfe168b", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:48bf0167-1fbc-5add-bdd9-74bfbb1cf5c9", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:88921a28-5760-5ac5-9567-28cfdcea91d6", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-webflux 5.3.29-tuxcare.8." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:405514fc-6c8e-5072-8874-f45d6a2e10f0", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dcaf811a-ba56-537b-a86f-bb1e2e4fe0d5", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:85cf3f9f-9020-56d0-afcb-0d29d8711a3f", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f4206271-5ae9-5a35-84f7-8850298cfb1d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:37ba9588-3055-5468-a1a0-04bfb27a0ebb", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6f9fb25c-01fd-5edd-82d5-8f6e64d1a5ed", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:551cca63-dd3c-5490-af65-0453a586e515", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b5f0e91a-0756-5a3e-839c-f511568a7e45", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4b6ea647-69f4-5cf8-a7a4-2e452d793dd4", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:73d45e82-3053-5a50-b55a-ef7bb6d49622", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5824fc75-dd58-5145-b867-36855a237f7d", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.8 of org.springframework:spring-webflux. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6fa67dd1-efdd-5a9b-9b7c-890e5adcc0d6", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e055caac-6371-57ce-8197-01b9aa2f32b8", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ddb4ea33-e8f2-5e48-8d46-cfc927879fa1", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4f75bd4e-83e0-56d5-9c58-2af9150f44bb", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c6e4bd4b-7fb6-5995-843d-fc3966d472f6", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5bfba908-a444-5e61-a1c5-5ee25d2d04f2", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:48694ad5-7df2-5ba1-87c2-3172100691d1", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e2889a35-2218-571e-ad5d-54b98cef1411", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:07ed1cc1-f1de-5b74-9870-ce2a6bc64a31", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:655c1411-3939-5358-9a9a-977a9e2912d5", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9417250d-0dcd-588f-952d-62f31ee35997", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5e3f08b3-e945-584f-a7ff-0b4af3fad606", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:71742f29-126d-5a6a-9f64-e1e8fe60b66d", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:15d4b73b-8f41-52b7-a722-50d442d374f7", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:53061dff-bc3d-50ca-9159-94ad049d62fa", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f177936a-1701-5b81-b586-570894fe81bb", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f88ccd8c-858a-51cd-b445-205da9ca187e", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ad3939e3-f0d4-50a8-9ebd-e6b5bb3915dc", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:195857f7-a1bc-5a65-ba58-6b23a27405e5", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f27d0164-91af-5349-b03d-beef83f371a8", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5860e24c-a761-51dd-ba40-efdc506d7037", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0faa0db0-0fa4-5962-90e0-88cbd6925aa1", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b462115c-0c5f-5904-bbdb-045db57a782c", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:09a67b12-e21b-5d1d-a770-835014d94c2e", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0dd645d2-76c4-5e04-94f4-4087d596e270", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f4988b4c-a3cf-5edd-96c6-e660e378efac", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:05c2b3d8-9b88-5030-91b6-e0ce9893cc8d", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e19b526e-70da-5273-8828-68d890476a5d", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.8 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.29-tuxcare.8" } ] }