{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:35f439bb-9918-5751-b210-1fcf125eccae", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "5.0.5.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6cfa0ee0-1b2d-5aaa-b86e-22946b2bfd99", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ccf5cd8-d156-5106-b269-de3ced7838bd", "id": "CVE-2018-11039", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11039 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3998184-56f1-5da6-a4c4-62585879a9b5", "id": "CVE-2018-11040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-11040 is fixed in version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c6df39a2-b8a1-586a-a2d4-11558ec2400d", "id": "CVE-2018-1257", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1257 is fixed in version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c3e997cd-fbb2-5a2a-9bae-c6958aa29551", "id": "CVE-2018-1258", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1258 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8638bf21-00f1-500e-89eb-5a2ff92ce3cf", "id": "CVE-2018-15756", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-15756 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:58cbc44f-aa53-503f-81fc-071dabbddd2a", "id": "CVE-2020-5398", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5398 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fe23115d-ac0a-5af1-aad3-300b6e8a6802", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:93100e4d-8cdc-5cc4-b67c-c79e8c8d0fff", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:177e6db8-addb-5ee2-aad1-09654421c0fc", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ad6231bb-d76e-577b-b269-ed4a6ee1f183", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d8e55479-6b87-5d4a-a930-427627262b4d", "id": "CVE-2022-22965", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e7210b5c-91c9-5b05-8ea9-fb7c8684a99a", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c7352f8b-6684-5b49-98db-704522bf8ebf", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e37228a9-e805-56e9-98c5-1ac6e1c5ff6a", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:95823c23-8c27-5e79-9345-394a398f68c3", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4f117671-34b7-5089-a316-aa75194725d2", "id": "CVE-2023-20863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a6b292fd-88d2-5b2d-92fb-9f2fd14dc9ff", "id": "CVE-2024-22243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a488716f-d2d8-51a7-b018-ef151e9356da", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c8bea03c-e629-5f32-9a58-85499f525993", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e2567d5c-45f9-52be-9574-7dd4892f3a65", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b627d65-2796-555a-af63-ac17fdcda659", "id": "CVE-2024-38809", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db64cfc9-f71f-54d9-a30a-dbcb850226c6", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fb68ad3c-b9ac-5546-8e03-c8f43328d043", "id": "CVE-2024-38820", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx. not_affected \u2014 Target version 5.0.5.RELEASE does not contain the vulnerable code pattern addressed by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() calls introduced by the CVE-2022-22968 fix, which are absent from this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:59e94b56-f5f1-5ee6-a476-d9df307789ec", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e2d81d6-f5b0-5ae5-a18a-4ef5a4f1113f", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:da68af28-7e9f-524c-b4be-bea338b5291c", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:37beed2a-62b1-5180-87ac-cf5d28b67481", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d90a3de2-5f5a-5e2a-93bd-676da2541f3b", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5514b04d-ad93-5d5b-905b-4c34a05da672", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.0.5.RELEASE-tuxcare.1 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.0.5.RELEASE-tuxcare.1" } ] }