{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:568abb27-21cb-5d09-a3fe-9c0221074416", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.2.13.RELEASE-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:9565ded5-c650-5b55-8416-7cd6b41987e4", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d0f0d689-3d40-594c-b2e4-358cdbf8b6b4", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:15bd34bc-0ff6-5ea4-a689-d6f4610c3aea", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ea21435c-ad97-5c7f-8924-649c3aa031aa", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2afed241-a1f6-50d7-b1b5-01b2aee18568", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:63f04cda-c7f0-591d-bc8b-24ed0ed990e6", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8ee74596-8b6a-5dea-a0be-99682338804c", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:33307730-33b0-52e8-bb46-7bf3d408da5b", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:46955460-1170-5309-a031-8f5fab65dfad", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f30905df-ad0e-5fe6-8d1e-f2ee64ee4248", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b04b1297-9567-5c23-a90e-116e20372221", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:90407534-a9d2-5c67-be5a-42b28c6ccf43", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8155b073-b768-56e5-a045-74018bf71cfd", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:24d66b3e-8b44-5cd9-8861-50bb70ea2bff", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a2ac3ae2-2e53-528a-b284-a9f5e2fe68e5", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b157d5f0-2d0d-5ecb-90b1-5e614c8e3ec6", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d43dba84-4227-5ac9-84a5-0240c1f91c3a", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0d5521e7-5432-5f94-96f4-522d3947fd6a", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f8b899cc-fc1f-5921-803f-7f1b1c2df016", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d415f211-0a1b-5590-b206-62b81e623863", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:30fec275-60fe-5d1d-a3ac-28bbaf1e64f5", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a0249c8b-aac5-572b-b2d5-f876afbdf426", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:fb1899d0-6883-5304-bb39-80978f817c53", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2851106d-0b63-5dd5-afdf-bfdf29d075a6", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e8dedc20-e662-53ea-9181-bac893ca68ee", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c5b0240a-6796-5bdd-b780-6fc163e068ab", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8461f124-1843-5e2a-adc0-71aac45bff73", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ae030c8b-8495-5d50-b179-e86e0e468ce0", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bb101d5f-38ed-59b8-a4cc-c1590238f361", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:52a39bbc-1f5f-5249-8b9c-84ae27b1e3f4", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9b170c32-51dc-5bbc-8f64-33e8bf35acce", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:5b216b25-915d-5862-bdd0-58c8515072dd", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a1297e3b-6e1b-53e4-a449-25ca9930da0a", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d0fa5bf4-bae6-50b3-9612-7eebc15f5622", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ef57bcd3-d48d-5311-93a4-04e87543f169", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:018e66da-5f6a-5ad2-ab67-293ac4422256", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bb96bec6-1207-59c3-8bc4-c497f6dedb88", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4384f7ad-5e26-55f4-8e6b-254543143a09", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0743dd57-acf5-542c-a670-a0727e07123d", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:59192507-a174-56cd-b7cd-0dc3cdaf6c09", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:10b2b2a2-41a9-5fc8-a45f-ecd2be600582", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:44ac0b50-d063-5bc0-adde-ccbdd826f7e4", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:31fcbbbd-4d68-529e-b5d2-a2e83e0b8caa", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.6" } ] }