{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dafd15a4-8eb3-5623-bd93-db2d4e4401e2", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.2.13.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1f32f93a-3c35-5790-afbf-ac59246eb81a", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:35428590-ed27-5f2a-8685-4515ab13bcb0", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4ee44ac2-d3a6-55a8-abff-24ec30449e09", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b97f4bc1-5cd2-5a18-96df-289252bccbf7", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:94fc7026-a31a-5ac9-9259-f62ac2cd53ba", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3809c780-3a55-5ff5-96fd-898063db4aba", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:27d6696f-f2c7-54c5-b47e-73130c239705", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ae623389-4ef7-5791-bd2e-c3006b2df58b", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e9254a58-5036-59d2-9445-d29c05b0bfae", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:de95f3c6-cc11-5a27-a22f-6014875ae1b9", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:21c15fcc-3d66-5887-90b5-c157939267c6", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f84e9a0e-c773-5a5d-bbd3-86ae2dc1fe08", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2bb7213b-c922-5640-a644-ed4c3e973620", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b8d7225e-2a13-5172-be78-ddb4d07e11ad", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0809dc1e-ceb6-5d84-92b6-33082068ee72", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:042e60a9-e63d-551c-9211-add790d6e26f", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7f26336a-e964-58b8-abaf-983fe37b588c", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3a41eefa-6a6a-513d-8f82-0b8bad74aa5e", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8fd8b1cf-584f-5cb1-9588-7e0ac4e84788", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:de1ec955-1ecf-5c75-8902-e90b9fec916f", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e34d054f-b00e-5dfe-b4ec-d719e46a2f1d", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bac6eb3c-fab1-5ebe-adc9-42f38cb19db6", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:06450806-a0a1-57b2-aa90-d863ee08c95e", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eecbfb42-3769-50e0-bf2f-72bdc188256a", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0279fbb5-8504-597f-aaeb-f24f500803f8", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5012d844-3f75-59ac-bcda-2c39552f7ee7", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:41b03a27-f60e-5c82-9a7b-f88e2bcac9b9", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5479d2a8-ccab-51ab-acea-7bcfbc92a50e", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c3dec387-bb8d-51a7-a1b9-b281a6320d87", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1618e6f0-1c62-5a6a-94ee-cd146489133d", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:70ccd86a-4b44-53cb-bbb7-e8b2fab0ddc6", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f88908fb-d900-59a3-baaa-3da36515011e", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c650df15-c6e0-57ed-8da6-d5ffd34f61f6", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f9abd555-baab-5554-b5f0-29289049b893", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:78810657-5b3c-5c8b-a266-09d49c0e7a8f", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d3b4f707-74d6-5bbd-8a2e-06ddc29a9a67", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6521352a-4ac8-5984-88f2-5d5a1db0837a", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:240febfd-a8f8-5040-978e-bbe372dc247f", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7196c569-9832-5c67-8292-7580c66d6f5f", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:527ef18b-eb07-54ff-93dc-a70804a54f1e", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:56e5c7e0-06c5-51e4-865a-f2806726bc33", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c9f8ca66-5584-5cc5-b68d-7ce530bda6a1", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:06b09b5e-26eb-590f-acd9-f10fa3ce1c57", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.5" } ] }