{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6885ecc1-54cd-5e38-aaec-7c76d1325a47", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring", "version": "5.3.29-tuxcare.7", "purl": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:820e61b5-99e8-505c-a2dd-756b45180aee", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cc71c305-27af-5468-b0f1-8dcb454303b5", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:121f6cc2-d6be-5ba8-891c-2b3a39d93a0e", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:47cea443-7461-576a-9ac7-5c9b6c7885b0", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fbe188ba-2a0c-5530-a38c-0bb07ccd52cd", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b3ae382d-fbf0-5c70-b127-971f537ad68b", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bb219345-d028-511a-86fd-bb1ad5fbd9ce", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:54e2a619-887b-57d9-bb82-566f95a40b0a", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b341b0a9-aa03-5de0-bc69-a3e8b274bb56", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2ec0d17d-7055-504c-856e-aea59f5d8554", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7edda00a-9f52-502b-b302-d13c23aab123", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4c5b40d4-c379-54ab-a22b-c9813e40dd46", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring 5.3.29-tuxcare.7." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fbc934b4-edd9-52ef-a681-416c1e465b1c", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:121e7439-46bc-58b0-a789-f467aeb510d6", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f5efa0e9-d942-5396-9280-9d690520110b", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:23c84cb5-e98a-561f-9f6a-1382831ee6a8", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e278a164-2126-55b6-bc4f-199ea103160e", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2330035f-01b4-5e8a-8e32-39132c9af196", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5fe74124-c7f3-59d2-892a-fc784a8f3452", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fdd2c145-4d81-5128-867d-c8dc528e6e82", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8acba0a6-c8b2-5576-a8de-ba21f9503813", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:85be2d6d-426d-590f-8b46-bd95cfedab94", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:009f891a-053b-5f33-8bcb-561022bd151c", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.7 of org.springframework:spring. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0e8e54ba-bf1c-53b9-ab89-eeebd13336df", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7ffd69dd-30b1-5406-82b1-a2e4cabbb680", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:82ef386e-2990-5118-9ba8-192bf0d5bce1", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fa715ed4-b7c8-54fd-8777-7bab6eb22815", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:521ab03c-d150-583d-9d7b-8a23fb4e79d4", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:58badf4f-a7f2-5e18-8cef-7d6929c98850", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:aeb1f3d1-2ce4-5f55-9c0e-f06f8c2c8be9", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:232d65a8-9e4f-5cce-b4e2-6162c1de1c5e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a161da70-f4df-590a-9990-ee8077dbd829", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:926a73f7-36fc-5f11-9d0f-d5c7144429cb", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9060fd8f-8437-51c7-b487-b7d2306c8b4d", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e892ddc9-ffda-591c-8377-7e67bb9b31c5", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:67ffd81c-cf24-58e9-83ab-31bad27870a8", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7492a9ee-8897-54dc-bcaf-59afbb155f59", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0524d201-58c4-52ac-85ce-1dd9a98389b0", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:968aa066-3090-54a9-89eb-2a7d6e33e6c1", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:46a5645b-b994-512a-bc15-8415430ad0b0", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a48cf334-9ac8-55e0-9b4e-ac2e9c53e17a", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:21280c1f-ffb2-5a26-925c-e38928a6b523", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c89e01bb-77a3-5e8f-b139-3dd037734e08", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4cacaa33-7108-5142-8e14-10eeb4a57cd5", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:87cfe873-fdc2-5052-b47c-74d7de9119e5", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1bc1b0da-49a3-5935-ad93-b5e267026fe6", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2d35b78e-084f-5ad7-84df-ecb4a6f1ea5e", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:701bbe93-1abb-549f-a5f8-8b1e33f250b8", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c6ac86a3-a0f8-5d5a-a715-597e997b95ca", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:465705a0-efd0-587a-8ef0-066613e138d2", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fde96c37-2fc0-518b-af56-83bd247b18e3", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.7 of org.springframework:spring." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring@5.3.29-tuxcare.7" } ] }