{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5686437c-2740-51d8-b9a8-fe0bb8988432", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.3.27-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:86d1ed3b-5682-5ad7-a8f0-2269c85e9272", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:fd0e9e67-eaf2-5ac9-8a2a-7dc8d200d695", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:52741b0f-05bd-5906-8c8f-7db60aa68937", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f59f69e4-7683-58dd-98e3-33b3f92bf1fe", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:caaf977b-24dd-5f5c-a292-665e7b88816e", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c1fa1813-c011-54ab-8f4a-fcf1ee8ef0d5", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:80842dc6-f785-5999-8535-665f46b5fce7", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:af2ef593-0410-5ee0-976d-ae7b2f3cacc9", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:408ef671-98f2-5f3f-8ffa-1f88458aecef", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:26c16b3d-0098-5a3f-a708-adb4599d33aa", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:44ededbf-4093-5bc2-97f7-67372580faed", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6a42b590-dd13-5443-8e26-abd8e27160fa", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context-indexer 5.3.27-tuxcare.6." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:fa39ac4a-60a1-5540-954c-c9f8cae80b01", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3c3d08a8-9ffd-57f0-ac56-043503f86741", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:affc96f9-3378-5494-be52-8c4e4bc81ca6", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7e4bdfed-f623-543d-8cd6-027427ab4c5c", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bc0fb4d5-9c2f-5015-adba-f7d562c17256", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3a87706d-e2fe-5195-af1b-100d5cd1d195", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:56406445-d753-5aea-a24b-e8956cabfabf", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7d07c454-7a25-5835-a67a-0838de977d29", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1199293f-49c7-5fdd-8360-f1ec1d0bbb4f", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:79e8e770-0bd5-5e84-bc77-55e024c21191", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:00850a4d-15f3-5e52-ac21-9e8b3dbd7084", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b1fae4ce-6e09-5f30-a5a8-9cb21b1b1996", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cc4bf1dd-f6ae-576d-ad57-f793a42ca957", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4b275354-b27b-565d-8f97-d73666824cb7", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:25661a53-0cf7-5d1b-abb2-9ee2a5ded52b", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:09ed77c0-cd86-5b81-8be9-b331b47e4ca8", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3342da7d-b994-5159-8eaf-4d58d25d92d2", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:66a4bb97-fa75-5e81-9b32-435d10402f70", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:90d32e21-9894-5d86-b853-4238cee96c23", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:5a3e96f7-a80e-5146-a4f8-cb735ee1d70d", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:33baa6d9-aab7-51fe-a5c1-d4d3a98c4315", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:304a6e3e-4da5-5049-8954-0204d4841de6", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9c2738aa-bced-57a9-bef5-b9ac237e5ed6", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:49468263-898b-5b8f-abf0-e97fc83f31c2", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:52ea990b-f3b3-5cff-bde2-d9b07016cf27", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.27-tuxcare.6" } ] }