{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b0903ebf-5b63-5d2e-a7da-2cc49adf5a45", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2", "version": "5.3.33-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:445400a6-03ce-57ef-b7d3-3578db571fa5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:ef7414a6-55c8-5ede-ae92-52610ad0307b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:0ba097a4-b336-50bd-b2ba-02a98f19457d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:03ad467a-4d5b-551f-8711-82dc8b38528f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:c9560147-cb68-56b6-a4c0-b5c20403787a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:68d4b506-5c1e-5eca-bd87-02b046113d57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:0e75ffe5-59fa-55bc-88d7-ccb359cfbdab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:2eaeac78-9120-574e-a8cd-9fa9bb7d6ae8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:e0d372e9-16ab-5971-9108-81538e0afc13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:df9ee70e-7b8e-53b4-94e5-741c03417389", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:1441f637-93b1-56f6-a1c8-30b690df440e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:9b46be15-429c-5aef-8244-6e1bb45403e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:0fa42fea-0643-565c-9c0f-37273156ee03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:bb2fe78e-d840-5d73-87c0-5e2a0bbc4eb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:5c1e7156-4878-5437-8d63-f4d3bd854090", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:42cca8d3-9e11-5e44-a1b4-bc3f2db75b1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:3268ab8a-5f97-57f5-9247-37686c9c6710", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:48c84195-d329-5b0d-8ed7-6f016907a8c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:ac0e834b-9af8-5883-8345-ff19c648f2e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:bfc123e4-2c16-5f11-9e12-6892f0991bf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:88a531aa-fd96-547b-abe0-41767cf435f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:77367376-1caf-5926-95ed-25accb019ec5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:6d1befd6-840a-577d-8161-2387127fc47b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:7790d237-d348-5ed0-b031-1105013bfd75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:47980c18-4638-581e-b052-c6b9f3bc8a5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:b4281eec-ca65-5a9d-9834-31ca2240c4fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:f4a9ec80-93d3-5708-9215-0bd1a0718b2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:2f44d765-96c4-5ddd-bc2c-142181ce45c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:672ca68b-d5da-5127-a581-784a26778616", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:42475993-a97d-5da7-bfc9-e1aa08cbad8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:6d04a348-9356-5871-a430-879532899dd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:35382ce0-3ce0-57ec-8f81-ba4ecad544c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:fb948905-6534-5cfe-9399-c6d853a4f87d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:850a8d87-187a-5bd9-980e-3a600a047269", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:78a2e45a-44a1-5e2a-9ee3-37eda6842cdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:b1e45995-032b-5ea0-b903-70e9a70db3f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:da14934e-be00-561f-b4c6-25b58671bf67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:28021e4f-1d9d-54f3-a5f8-19ce85186fa8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:3270350f-2597-5a9b-a964-6918ea3be884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:4d64e26f-b58e-58ba-b2b2-782859bef8a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:75ab0da0-651f-5b61-8868-30657a0739ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:18c67fa2-a754-5e93-b076-2bb1e9eca979", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:f0250ce1-071c-5679-8e41-2c43767f9b28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:96aa6b71-2a8b-5873-b4f6-9d5ac81bfb89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:1e6de279-1783-5591-9ac5-8ffdcf972792", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:fa1e3a76-9714-55c4-8d65-56a3044dec6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:84553386-31e2-5b39-af31-2feb17a084be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:681659b1-bfc0-5e0d-9008-36f3068f1db7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.2" } ] }