{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4df13abf-1c80-520f-a520-6d0bb97b03dc", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.2.13.RELEASE-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:047ebcd4-3348-5059-87c8-54e38e9d9ab8", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:49f4c27c-032c-56cb-a0b0-d7857e88b221", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:45eaee80-9a88-5199-84cf-b12b37ec63db", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:afb0e7df-6c4b-5d32-a06f-24ddf9281eaf", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:065ffbe8-4687-5fd6-8e8b-b8dbe47708eb", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:48631538-9425-539d-8138-8912b5ddb261", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4f428e89-9a82-5be5-8656-c795e5de05f6", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e344ab0c-1cb3-5bc0-b194-24941b7f3941", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:12b970c1-14b3-540f-9a59-4a2049badb9b", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:19e7fcf3-c628-5a3a-a469-6aceb4896d24", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ba961183-9d7a-5eec-9f7c-2ea6582084af", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8ddc15f7-48d5-55ae-928b-121a4241c5dc", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7e448fd9-5117-5cd8-bfdc-b9d6374e1eda", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4f067a50-b446-5acb-995d-bd66caf943f7", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6296f4b7-af97-5837-b622-2e880d49a1a7", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:994e5f79-14aa-5aa5-a77d-81891512ad86", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:63922978-939f-5cbd-a1b8-fcdcef5dffc2", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:83305d1d-2709-52a8-89a2-5e9e47a24087", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e7c53281-f86a-55f7-ac4b-9159f2f88dce", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:dcf4072e-379a-5037-8557-03fc0e82fa65", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6dd65ab4-8591-5865-a4cf-249c9e39e4f9", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:43ee0fdb-b3e2-5300-994e-17b614c30efc", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0f72ca53-fc11-5edb-aa4f-cb39b0b86eea", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:87066200-1332-5fa7-ae75-51089ef7afd4", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e5139d8a-3466-5540-8aa2-60c6c23e8e2f", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6231d164-4009-5231-b310-bb051f036148", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:33fcacda-2b8d-5a04-84ea-af7a8ab321a1", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e599b658-41f3-527e-a4e3-74db04c07cbf", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9bbcf2c4-7d7d-5487-ac83-010d69c029f4", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:97c2031e-5602-5055-a9db-67bf5bc17b0d", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:51bf515e-8a97-531a-ae59-c72a6f7f9488", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6670bed6-f0e5-5e21-b8f0-9fd47010988e", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:88cd7f0b-f0c1-5115-8d2b-fe2a4d222022", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4ea864a3-521b-5b25-b428-7ad89e0045ec", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b0975677-d658-5b5a-ab7c-8f3879777075", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:82e8f374-1ba9-5f11-a3ab-f1e384da28d6", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3f882ebf-32e6-5757-bb2a-fdb3122ea58e", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ad88cbd3-d419-519d-8c38-0f964190ccaa", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7230ad6b-eb85-5598-a5ea-0ec6c6a23455", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c6bbb129-e0d4-5c7b-b75e-0a73f3af1257", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2bf2a64c-db35-5e6b-bf5a-da6ae88eb40a", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b78f7ef5-7eaf-5152-baf8-972da686f5b5", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f97ed8ec-690e-57bb-aa6d-99a595e474f4", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.6" } ] }