{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4cfe8859-d679-5064-8d43-5c08f10739c4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.2.13.RELEASE-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c8d4e03b-4c28-5088-9395-eead9b6331f8", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:fd839eef-f732-51de-bf53-c1ee36eb4559", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:25731499-f12b-5599-84d0-b30053a0ce79", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f0fa5d0c-d702-504a-a5e7-f56bcfc342dd", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e44e06d2-6305-5d1b-adf4-5f507977e32c", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:adeaabb3-fdac-54ba-9990-7f0cf184a191", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d78a9c91-f05c-58af-8979-8efd28a3267b", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ad251fc0-ac35-5c7c-8770-3969247c24dc", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c350b16e-8375-5abb-adf1-5a9fd35d017d", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bc274f95-2f51-56d2-8587-8dcc58e2e9fe", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:44536db3-40ad-556e-bd49-ec8419523be6", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e12270a9-b0af-5d84-a8da-cea4fcd199e3", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:20d9aeec-001c-5855-ba4b-a20e98e7a960", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:506ecf26-f789-544c-89de-7d686baed022", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:124d9e4a-ad9d-5c20-8fb3-1c5082632f9f", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ed82f280-25b4-54d8-bbeb-1ec6fe3d3585", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:153dc0b5-a719-52b1-91b7-3421c75febd6", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:714e7d6f-fffe-5b55-84de-9ac136fc8491", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0442a6f4-0675-5ada-842f-49134d737519", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:507800ba-e5f4-57ee-9e08-b170887a0f25", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:003712a2-cbcb-5251-a922-3dff4145f2e1", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d43c4873-9e91-5323-8fb7-df48f54c6dc7", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2b0352c3-c5ee-51c5-aa4c-a2cf522f16ff", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2e38341c-16ab-5446-865d-5dcc0759cafa", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cc19de7d-874a-5cce-92b7-160e7d5d9ed8", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f0274657-7d7b-5713-b8c2-ba4df87ba82a", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:28d2b18b-3bdc-5bb9-8d4a-a33413ad0e9f", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:50d1409a-73d1-5e6f-866c-08a38b26d74a", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:76b0841e-6ff3-5d47-b886-a74153122c84", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:db95fb8c-85bc-5ac5-bd9c-ef1c737cc8e0", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:033c8c54-589d-55ad-aa15-44d9a3d49ccd", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:56fc7f01-5b2c-5690-983e-2d522ddd010e", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0faef77f-5b13-5484-b47a-6189e67d7249", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d6b7258e-6e53-539b-90ba-f8733e7fb3ad", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:71609831-e3b2-5a25-8550-08bc9afd8bab", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7b3332b7-09eb-57d9-a335-d983355161e4", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2c2aab57-1453-53fd-a04b-8b626e4b0815", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:21405aba-9458-57f7-bc99-3240fb3b4184", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:93d16f96-ab60-5d9c-83b2-c6861fe82c90", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d4fd8347-0fc5-5f8f-9e4e-140bc74d8100", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2c2ecbc2-4754-5693-9a7b-d87cd698865d", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6b44df15-11fd-521e-831a-11ef852eb196", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e9787673-6536-59b9-b318-ab62e54f0a13", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.2.13.RELEASE-tuxcare.6" } ] }