{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fbd068e2-3873-5f08-842c-3b377fcacaa3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.3.31-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:391d4ca7-c44e-5f30-bfe5-8b9df44a9f49", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5ce6e698-45a9-52cb-b45c-db33ff48cadf", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2ccec620-d656-5f68-9122-134f5cface41", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:dd05f97f-bc15-5398-807d-93b6e853fd38", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b3776fc9-a8f9-5cba-b687-334864194f41", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:19cbca04-99e9-524e-b674-5905e6d28285", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a5c4d631-24a8-5e5d-b6f1-bb481a2bbff1", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e947c850-256c-5cf4-8a69-e39cd353d9ca", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ca831c91-d727-5617-ba59-0a57bb6b97f6", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a29b4482-91a4-5409-b238-0647d38009be", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f4228b0f-b8c5-5d9f-8904-18f4c89646ad", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8f7dbf45-f1b7-5e77-91af-c9b1ccdf146f", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-context-support 5.3.31-tuxcare.9." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e7f88621-660d-5f3d-8fcb-10a3fe434fe5", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4282826d-1d5b-5d5d-8a6b-d8ca617e88e4", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8e4d6fe5-6b9e-580e-a972-8f72d08b8c3b", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:92e007e6-e8e6-5b75-8c2a-f898c8fa33db", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fd870a81-b31a-5a4a-92ea-410bcaa9bc7c", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5253fac7-c6e8-5b84-a667-06a34aba1458", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:79187de1-9a48-5459-909f-1924c745412d", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0bed54d9-0d2f-5b87-a06b-b5b4c651f758", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:74ef4a7f-0a7c-5961-ad82-30f9c910ede7", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:357cc66d-711a-5730-bb9a-4c64acd32b9c", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:277ed8e1-6d62-5a7e-80e9-b4dca5c030fb", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.9 of org.springframework:spring-context-support. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:306bfbdc-5c1b-5cdf-9d8d-29bb1df176db", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0d3d5b97-07e0-53cc-8ae8-af674ad3d592", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9aac0076-3cd2-5de9-b5da-0f926ba64e59", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1f74c0d1-4aec-5071-9ca7-cfa870766022", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ea1be7d0-75f6-5496-b66b-e88ea9a19366", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d0250301-523c-5e06-97e6-63b2ab12cef0", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b9c3ec34-d59f-531e-be81-ea039913d497", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e31c5d08-28e0-59ef-8a8b-0390ad548fcd", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9e27470c-2b9b-52be-bdc5-965752ce88a5", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a65f583d-7631-5be2-a836-5c313935a6eb", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0d0fc65b-16ec-5812-8867-ada8c30fd354", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3b61d73e-4c89-5a7e-8bb1-208031e78c74", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1a39df5e-de99-53d0-9e96-60929f05d8b7", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:01bbfb11-78a2-5db4-8f65-ce53800db0c8", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.9 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.3.31-tuxcare.9" } ] }