{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:01e522c5-959c-5810-9818-2c572ef3c63b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.2.13.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:249ada22-3435-51a3-9e2e-aee3cd9d5ecf", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b93923eb-726e-5ecd-ace0-b40581caf51a", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b2d587fd-18df-52b3-b361-f6eeb01cc7ad", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:90cff6ad-ef1d-5ac0-a14d-ceb281df37d4", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:acdf3090-a3bc-5711-b31c-34fa0bd6757d", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3ec9ce70-3bdf-524b-994c-4bfa17f36355", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:85b5841c-f4f8-5cb3-be52-6598b826c767", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:daa707d9-fa1e-5aba-8150-01b6a9be7a55", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8c0a96f0-6192-527f-8fce-ac81d3291042", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2867b740-e228-5b54-9bfa-8507bfd2f02d", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:80161b87-c5fb-5648-b6d3-b9c6517df610", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9a892fbb-be96-5dae-b986-0675ed2d047a", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7b8e86b9-ba53-5b7f-81e2-5f0793b0c2da", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7914cadd-93e1-5b1a-bf96-35e5c87884d5", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:385ed591-f156-5754-be88-b300b26922dd", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9873425b-7e84-5d85-8be8-41f4e264f2db", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5c5bc6bf-9fb7-52b6-a4a1-6038452ecc89", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:851dbd88-2fa1-5db0-b9e7-c769b9089df5", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9dd1c6ad-575c-5eb3-8567-a5413c3a681d", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d9a5e196-206c-5bf2-b6c7-385de6918522", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7891a873-567e-590c-ae23-a5f60156e9f5", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9d9617f-f329-55e7-9f99-abd1de5133aa", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:99e347a4-4647-52a0-9a08-b0b9f84d84ea", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:52618a0c-6317-5ef2-9ece-a35fcb51502f", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e8c2d579-6695-5321-9043-7d655af8f736", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6e4ca2c3-274e-54ab-b38d-f6b0b0c57e37", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:df3b17e7-2ac8-5590-851e-62797a026241", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8e610bde-4ce2-58df-b0ca-97257c2a0c52", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0b918ad3-3e4e-5329-a3fd-2bc5f4dc14fd", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0bbc5f4d-4186-52f3-96b8-a420272de8c2", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e7ced0e8-1093-5a2a-9453-5a750aa729c6", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:917284e1-baca-5863-a8fd-c17db08e227e", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aa3bc024-f36b-5ae7-9d76-752fac2be3b7", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:43b12edc-b1d4-5d24-b29f-3c5f9e90c7fa", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9c399e9d-c70a-52ed-baeb-d9ddb4e75cc9", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ca399350-0c13-5a89-b06a-e98590123972", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:874dbe9a-54ff-5879-a102-780a29166095", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:23af02a0-571d-57a5-9aa1-df95af512013", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c946aae4-199d-5d1f-89d2-d960186488dd", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e5ce6950-761c-512b-9ac7-687e884e2482", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c0d51240-a0b6-5c15-81e2-58458b28a0aa", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:18b01d54-912c-55ee-ae52-fd84473922bc", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fc8188c3-5d62-55b2-9d79-7b43b64b4263", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.5" } ] }