{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4411d079-e75b-5696-b626-e894b7d0c658", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.2.13.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:77d4bd41-972c-5bfe-892f-114dfeca5784", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1b113683-b0f6-5c2b-862d-c1182fa76416", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:80642a69-de29-5316-a51c-cab1670472c1", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1501eea0-29d3-5d56-be9f-06af35ef1e8e", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:14ff73d0-91ef-5850-9172-03c21153c21b", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:27fb5c71-fc3e-5a6e-a7a6-93ee89cdd159", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b3f96075-be3e-581f-bee0-699573d892ae", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:588b5d19-13e4-5cb5-b344-859744a695b5", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5f2aecaa-9357-5a71-a28a-9f29db9ef5d1", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f44c3f28-b85c-55e8-bd3a-79364fce24d2", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bc49a107-13fb-5ec3-ad19-b6e96809983e", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c48fa2fb-61ac-5780-bc44-f78d1f8e3d58", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b9e4d254-2a91-5858-ba96-ef732d598d5d", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:89caee12-6ad1-51e9-be09-62520c6abb58", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b0ac9497-f89d-5727-b609-63703b2abd15", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:01e60284-59f3-593b-be85-3c5d81431d04", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ea36199b-e23f-52e5-8f5f-f519c97ae2af", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4d966492-5c0e-59e2-ac01-fa6e41a13c0f", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:51d4716f-df6d-51ac-9870-093bd5903859", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a093c05c-8eca-59ee-be10-e9dbee3097dc", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fd84de93-ccf1-52e6-8398-cba595b5850b", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ceb20f40-a1b7-5aa9-a707-1d6b46e3ad60", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a30ef10e-4723-59e4-b688-ccd3c101f7f9", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:db51ca91-3b65-5d56-8fdc-4af6bbe6ca5e", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b4190cf4-58a0-5096-9b45-53d89c82ac89", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4d6c5879-ebd4-5801-848e-5a7d12e9d9a8", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:249edb96-d5ea-5360-8ea1-78f3c1369b53", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cfcdddcd-57b7-50f6-990b-6524c811e070", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:87a1324a-1576-564a-9a2d-6c816089116a", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:91027ce0-5ad3-5411-a56c-5b693911e9cd", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2bad3fda-2fe6-540f-ba73-d2cc6885efbd", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:db9a4a68-d92e-5dfd-ad90-6233ba6bd1e5", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:686a4203-8987-5c96-8089-3acebec4d4cd", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:676930eb-a090-584c-8a36-aa671100fcbc", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bf3fec1f-9596-53c9-8349-4015473506ae", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8b26447f-a436-50a2-b89a-2f4e8fdf238e", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f5542a2-b0e8-5a6a-92de-499157bbbd3c", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:882d39c2-b5a4-51f0-8471-6f058bc07f20", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6a2d5f59-4388-5f15-b8b4-acdbdae3ebc5", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b2cb441e-b3ca-5ca1-8c7b-bc775b662704", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3ac4f0e6-26fb-5ce1-bea1-e419be0f9a62", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7224c454-6257-5bda-a22d-066484e58663", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0553559d-8ebf-594b-bd94-fb97c8166e7f", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.5" } ] }