{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2f62fdfd-d87d-58cd-a3ab-a73eed3dab1d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.3.27-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d946cd2b-5f45-5378-8490-f4fab1d68d2c", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:78c28f18-e594-5a3a-b582-22144a03aa60", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d2b16779-c8e9-592f-9f7b-72987eba195f", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:af02032b-26f8-5e2d-aa7f-a65abcafa047", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f05e536d-bd5b-5ea4-ab29-871cbe22ca29", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e17ea61c-5638-5e40-9ea5-17800aa1ab95", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8357bb36-ecbc-5fca-a1cd-c141c420cd61", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4b4b877d-6fab-5363-9aaf-f731df57ea80", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:887aa660-3ab5-5c55-bab7-373609302dd3", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2846cee7-dbb4-5038-8b26-8fe039fd68d3", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1258c303-cb7c-5e99-834a-72a01b9bebde", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:be84adfd-b12d-5fdb-b47b-66285d170dc0", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context-support 5.3.27-tuxcare.6." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2e273eee-3e76-561e-b026-553a864f0fae", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:71008085-80f3-50d4-a640-5acd18fda578", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ff05697d-e05e-5825-bb1c-9c8c73952561", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8786779e-11be-599e-9ef5-ea308f495600", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9cd6851a-4f8e-5f58-8302-0fb4d97ef4ca", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9f321e00-5377-5d16-b052-97a382dafd41", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:31947714-20b7-5b89-a8cc-6b2b6399a2ae", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:54257ac9-0554-5088-b86c-712aeafc606b", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:32c61026-72a2-5c49-a9ab-67a344cde590", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:00558988-2a5a-54bb-8b4c-f1e1ab6f8bb0", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:26c6bbfd-bbea-52e5-a1f9-33cca761155f", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-context-support. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:333f0a83-d387-570d-bc87-9f3fbf4f3ec3", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:15767561-86fd-599e-9cf1-92d747c96c40", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2935cea7-b38f-5313-b055-98096b5f1aed", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cc89b162-45f7-56a4-9bb7-9e638b053959", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:77e84195-0149-57ae-ba09-0c60b1ecf573", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:35bacee9-9d51-508c-ab76-30d45b0e2109", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d5176653-b258-5601-9d96-d3145ffff855", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.6 of org.springframework:spring-context-support. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0d442924-2a4b-51ba-aa1b-9984c629cfd9", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3dc3deba-50e5-5d09-b6a1-5b6e47920e35", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:da1d37f4-5a30-5fac-87ea-ad954986abb2", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6cc19ae0-43d2-5b8f-8aac-dd5c97916086", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d3969f24-2651-55d7-bbed-5e3cd7175250", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7dd6db29-abda-5869-8938-64c143b75df4", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c6215074-5b07-5da3-8b46-0c0943b1887e", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.3.27-tuxcare.6 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.27-tuxcare.6" } ] }