{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:aaee4a71-5aae-5733-9b33-ea5c37e949de", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.3.27-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:652b336c-ed3d-5d7b-bfe7-a8a0aa16797d", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8e9ce2c3-4814-5d16-8779-89d7d38a625d", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f7ce6199-4a2a-54c5-87f6-ef9b4945a96f", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c2b8311f-7a66-5fd0-a9be-6befe759e9bf", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d237d404-f9f4-529a-af40-6199724f12f7", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a51edb46-7251-58fe-b999-4d18a69b9679", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c53c0bd1-902f-55c4-a54e-d9b41fcbcbad", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:34812fc6-06b2-5598-a336-a870fbd8ec3a", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b82c4125-74e0-59c4-9704-584ade0f1abc", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b157eb3c-251a-5d6f-b253-5cf27c29b473", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3477208f-16a6-5b3f-9822-77b46c465ef2", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9640ca2d-d783-509b-90ca-cdf90dbcde4e", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-beans 5.3.27-tuxcare.6." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f491df63-e4bb-5297-902e-664d83da295d", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f0924b66-fe9a-57c9-9130-6f1d8cdc04d8", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:59bbd66e-ca9a-56a7-a71c-5e9aff59e2a8", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4abef432-2d1e-55fa-b98f-7e8fb7e9af7c", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1057eb19-fff1-5b45-bd97-51a3fe54c1e9", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:28627038-8fdb-5611-ac8e-df5405ed10ea", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:230d3bff-c6f1-5b29-a378-38c284d987ee", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3b877c0f-f44f-5862-92bb-f5a10ba7495c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:293d1951-e807-57d8-aada-c6fa3b933487", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d4c220b8-f4e3-5110-9499-ff67b11bd275", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a3726189-1170-57e1-b4a3-5595dc7f8190", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-beans. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7d949a33-6686-53b1-881e-16847df5f4d2", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:595bd5cd-4f31-5a9d-b4af-1ad0cbc1c1c7", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9cd205a9-8f28-51fd-b319-faf8ae1ac704", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:26d175cb-b204-59b3-9c88-a271d3e34397", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c9bb2729-3f2c-5400-b73f-07f55a572e87", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:5da871ab-dca9-53e8-a6b3-b5b855188e0f", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:53b9fb1c-51bf-5195-b23b-6aa7692dcda6", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-beans. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a0f3a23f-0612-53d4-91a2-5c881dbfaab4", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:50a3650e-4624-59d4-b195-d5c8288f0ed0", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9cbf329d-201c-5ad7-b802-5858ccef59ec", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a68ae72b-0fc8-5a6b-98fe-d50299eaf715", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:eb21ced4-c7eb-575a-8163-e72cd800420c", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:63569b90-40df-5712-ae60-29718999c2ef", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:983bf7b7-8fe5-5eac-abed-c6357538b9aa", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.3.27-tuxcare.6 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.3.27-tuxcare.6" } ] }