{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:47bff1ee-2543-53ea-b865-fa0a2563aab9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.1.20.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:21ef8c97-23d9-50e8-a10f-a44bc818a7a0", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a46b81f9-3dea-5e63-a8dc-0a8503d9ec53", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a588dac-d7bf-5073-a53a-ffcb280357d8", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:53c7cdd9-facb-5645-bd4a-a57b877d8f1e", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fe38d4fa-10aa-5634-b983-eba6447cfcdb", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c8925f5-0562-5b47-a210-71d48c8573c2", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f6bab77-fc42-5faa-91db-030539b76e49", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d827123d-739c-5e26-8881-fadb05a1698c", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1e3ecbbd-06c6-57f7-b751-217b6693b1fe", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dc471d3a-bf97-5e7f-b2f3-76dc7af7b171", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2a5ab8c6-92ec-551d-ad1d-5daeeeb42c21", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dcf4ca21-ef5c-54d9-a339-e4f0b9e61fe5", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0163a58b-658e-5657-bfe3-b091ce4360f0", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fa2b81e6-79d4-5ff0-ab08-208492bdad99", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c3fb5b4b-432c-5b2d-a77a-379b91375ef2", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1f1decd-e705-5274-958c-3874ab2da9d1", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-context-indexer 5.1.20.RELEASE-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:77401914-ba9b-574b-a816-9492c4ec27f7", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7c5c3011-6205-5b8c-a5e7-a6597c38f60f", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f10b8397-7528-5684-9fe6-2f22797a5a59", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:10f17db4-378d-587d-bcef-7282580f4595", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12d63a91-6f67-5939-9503-d9041bed5257", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:18a4dc97-74fc-5c53-92e2-642733c3ec10", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a1e2effd-dd08-5b83-ad3a-bff478b92846", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8b8a160b-1261-5218-8b8f-90de83a8022c", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:55b8b5bf-fd66-5ea1-9848-9cdeea52f2ca", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d73b9cfa-d6b9-56fe-ac8c-bc0a65c47a3c", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d0aa7005-1903-5969-ba66-a5a70f56ea3c", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d5874f51-d6ee-5abb-a413-8917c1069903", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:be5ff408-15f3-5afe-8fe8-4a6ab1f67c10", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d77cb711-ef8b-5b31-836c-9d217c0d34fa", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:01e2b81d-0880-578a-8133-15c350c8e341", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:975704d5-4ee9-54e6-8fc1-f23aa2aad6b2", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e358fe27-8079-5992-9863-e4835d0c7f7c", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b5067692-582a-5815-b73d-101673abae3e", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7caa09a8-999b-5176-9093-9f1c334694a6", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f3cddf41-0e33-5143-9f85-7221af1caef6", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a631571-10f4-581f-9beb-d15daaf38fdb", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:195302dd-2ea7-5d51-b2cc-d417bfb79fd7", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b827bbe3-737b-5791-a5cd-399107d290e8", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c510b128-9662-573f-b634-700eac90f3f9", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:51abc216-5211-529a-8d43-6f8ed4b7dee8", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cb820a32-a81c-5626-9d95-22d6ad9b57a6", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.1.20.RELEASE-tuxcare.1" } ] }