{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bd9ee32d-1e9e-5e2b-b924-218e95f0c110", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1", "version": "5.3.20-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:17e0b75e-0aef-5247-a637-f41edaa7333f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:68e07299-95e4-5773-97cc-9b4ff72db05c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:20c84b62-948c-5266-b43b-373c01d3f7cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:012cb7f4-aba8-5596-bdb8-3f2c9ea3d2e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:1bf3c8f2-5114-5d97-9011-1abf08ef06b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:684e65e2-fa43-5853-98a4-a9966cbdd2e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:a00ec65a-e0d2-5030-ad8f-57fc78a30e52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:9826c627-1907-55ba-994f-3c7b6c2238db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:884fc3c6-d840-566f-b203-3e8c8e5b787c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:f6e6be59-16d3-5f9a-8155-161c3f6e953a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:40c65970-892e-5c4d-8972-980226be8c1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:245388b8-1de9-5d1d-9046-50a8a9dcf710", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:2d569f69-81a2-5788-9564-a2da9591dd88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:09974b95-3be4-5d2d-8762-bea6876922ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:a1ca0d10-946a-5a84-a632-4c02fda772b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:4c4dc918-d4d1-5b1f-a5b3-19ece89d5856", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:4c472626-e91d-5ed5-b9dd-20f781da3f52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:f26a4bdc-8c07-5287-a147-bc5df913022f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:bda680f6-ff23-5c1a-a64a-83b80b51e0ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:0de98ba2-6beb-5c17-b0f0-27a87db16385", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:cad8af43-63c3-53e6-bff1-4354658eca14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:7f7da19c-6950-5605-a300-e4371e26fd2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:b836e110-1bc1-5dcb-9d25-b279c13ccafc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:da2f2ecf-aadf-5d23-8bb5-334b926f190c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:77d5ecd0-5b84-5c7b-afdb-ead6f06a0249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:0e78c25e-0a6b-55cc-b335-fead504f3554", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:65e50006-590a-5526-926b-ab89b80b70a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:f0d9a5ea-16c9-5bca-8878-0b72c9712364", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:7d7d58e1-601b-53f3-ba41-712ddb919cf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:143cff76-83e4-5249-9ab0-fab751e1028d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:daaca457-b74e-57d2-892d-acda826c5f13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:7e562083-5ef9-5553-ac24-56ce00b68889", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:c1608df3-37a2-59e3-bb3b-59cdcc720a4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:67fe3a16-9278-5e6c-bb90-5495542db33b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:3e276499-d8c0-5e3d-a729-e6298375283f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:a6be3d87-cb0e-5445-a8b5-1e18db1a17ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:042f4309-b3c0-5b27-88a3-83674a8b9102", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:97ebbaf4-c046-5948-ba8e-f4bbc557bc95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:f1a11c62-600b-50dd-ab75-5506155f80bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:09bd4e93-338e-5043-a342-bea03c4dd026", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:57286795-a8c6-5ccc-b526-673d170a30b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:2d282ab1-76fc-5735-b4a4-505e7293d6f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:eb77fe09-fe9b-54a7-9bc8-75d84e8a6a2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:76c31141-2a7c-5114-a09a-6d0d571d0dc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:7bca648e-4de7-5e4e-abf0-a9896d4c9454", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:31c6732a-02ad-59c1-ab61-4fe8b690c7b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:19e9c9ac-d570-5f96-af2f-800c08305076", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:0abb7e57-a927-58e9-8052-8311b4131975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:7b7c67e6-bdb9-5dc2-bf1d-81cfed7b0314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:6c0a482c-943e-5f7f-be85-28937baca6e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:9e2cc21f-c313-5f11-97db-860af6a302d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:41cd1ccd-e60a-573b-b5eb-0253a687497d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ], "bom-ref": "urn:uuid:9d654693-2c8c-5f37-96c2-292c5cadc844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.1 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.20-tuxcare.1" } ] }