{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:04bdb160-fbbf-5059-abb9-cc90871a51c5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "5.3.39-tuxcare.20", "purl": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c5c0df1c-3871-59e6-9f1a-bc8f427d46e8", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:15092897-abb0-5a58-aa04-ee119bc71e98", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.20 of org.springframework:spring-webflux. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:09a14e19-6648-5996-855d-6df9cfdbc181", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:8b87b4bd-20af-5930-b27f-c16bf280a7b0", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:80919ef9-e184-5326-8740-05e026f1e850", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:d1c05188-c2a2-5c42-b05d-f20e6de93dfa", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:65b6802f-77a9-5471-ab45-7ea57647b7cc", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:6ec2de1a-3cf0-553a-923e-3bc4d5f5fdf1", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-webflux 5.3.39-tuxcare.20." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:1eb5b935-d8a6-5fff-9040-09eb5d438429", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ecea79b5-16e1-57de-83a5-4665010893f1", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:7fc5c2e8-a5e3-538f-a927-f24c0ace3165", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:c517fd39-02c0-514e-91e2-54c142e518eb", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:fedec0ba-44eb-585b-b741-49265b9a28fc", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:36613e95-fb7a-59ed-a101-2b4f47509e64", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:51d14aaf-77d5-57e2-a5fa-954a36bf3bec", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:0b9da0f1-0ec4-5ad2-904b-874c1f1c4b2c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ef2300c1-895e-56da-ae0c-f10d7eeb8e12", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:53f84a66-abe0-53cf-9bd9-44c16e9b766b", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:505eaaca-74c5-5012-8e32-a87b87caada2", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ddbcc14b-79c5-5c7b-a5e4-60219f7eca2e", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:6f4ce90d-7f0b-5c27-8a01-f700ac3d17b8", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:b96556cc-f691-52bf-8948-609ea2302904", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:00787e6f-f394-5597-b830-a013172cca66", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:d7df5a27-804b-56f0-bf13-3dcb819880e0", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:132ce18f-e48f-52f7-b01d-6b64dca0a2e1", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:3d914aba-8bcf-55dc-a70d-ddba7fba685c", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:dcf3b049-1d6f-5e00-850c-3996511132ad", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:f70ed31d-58c0-567b-a3c1-df328fd5d5c2", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:f0d61b91-4027-5423-a410-a0c0a5f34be6", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ca2d5581-0e6d-59f3-a383-2bbb71d54561", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:932363b3-03e2-5ae9-850d-8b09e32c8549", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:6ce09fc5-e15f-53c8-950a-71c0edf8fafc", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:1e509c55-2470-5639-9724-a500ac6a89a0", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:5d27dc0c-0b7b-52ba-b7b4-cf5d25e3a641", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:5fe37611-2927-5b92-bd62-ad3496bdff22", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:f3333784-84f6-55c2-a1e1-bccfff65f155", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:d0b9ca6f-f38b-596c-9d8a-23e463743b1c", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ff5fc007-5b36-5af4-8e68-60e1dc0edec8", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:02155b64-1571-51fb-91c0-e76a6832bf10", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:73031d5d-7946-5973-b667-abb1b77aa308", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:a9a66b04-8ea0-543c-8c35-5d96b0195ef9", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:d2796f23-07cb-599e-ab4b-ae372ca2a6ed", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:6f8da9c2-7b3e-56fe-92a6-ab99d2dd221e", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:c0a3ab65-f274-5ac1-9dfb-8f27c82af610", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:00fa14ba-989f-523a-bd51-3ab2cdb90836", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:680f477b-ea83-5e12-99df-8fb27a33c35c", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:282d0c82-e30b-52b0-a886-86b5a8e3d1e3", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.20 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.20" } ] }