{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e73e3711-77b0-55a6-a61a-81bc55e8d34f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-core", "version": "5.3.29-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:8217147a-171d-5cba-810c-2da4638acda6", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b2f3d159-8562-57d5-9af9-c82cb1f68595", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:285e8c44-c121-5f26-b9f9-f603d0f01974", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c4c854a9-2bcb-5b5f-8912-4c3159f11b9f", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:236e8e98-bd66-5a20-8adc-1328b5f202f4", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a9a681a1-66e2-5dd8-b6ff-311c3a4c5bf7", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b218c2cf-51bf-5182-a9da-cbffd095394d", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e794bf35-7bee-55b1-9625-201a7f901eef", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6bfb214d-c1fd-57f3-be48-9b7d065bc4b1", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3ed1f102-a8de-51c6-9e32-5daa7475b5f0", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0e3d0d9a-9657-54a8-8f9d-397ccd2e901e", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb3c301e-d07a-5bde-bb49-6bf15b6d8d51", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-core 5.3.29-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b629f7d0-0bd3-5835-8475-5356073a3242", "id": "CVE-2025-41242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a0cb52f-e112-506a-8b69-184d3874204f", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:644a10b6-66bb-52a5-8332-8d9a2d7261d0", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:757b5f8b-21cc-56de-a0a1-a343b36b5c54", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:46f1d6eb-9e6a-55be-a42f-26cd5d40a050", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:269c0cc5-6f14-57fa-9167-6567c96228b0", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e5acd982-0e68-59ce-9270-53c3faac46aa", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aba9d483-bd19-55dc-a3cf-e27ce497ad2d", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f0ca024e-2b0f-5d4c-985c-942c5ab04a3d", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:81af7190-6d43-5923-bbfe-30394f7506d8", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d7084ba8-8861-5f3d-ab69-3ab6a28e561a", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.5 of org.springframework:spring-core. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3b626259-a356-5501-9817-dee43918384a", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a8f10d47-3951-5b51-9658-5a1e66d640a0", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d37176da-e84d-5063-b5a9-0f9c0c026948", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b5c072ed-b6b6-52d2-93be-d453bb62c271", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1d6e0ea2-ea6c-5968-8b65-3e00ac30633e", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:68c18e86-fc64-5963-83bd-c9e7a7dda4bc", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ce933b78-6969-5b0c-ab12-4014902a4630", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b79a6010-3c15-51c9-8eea-9224b3f607f8", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0fdeb714-b52b-5e31-9e48-8e042f5390ee", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9a121acc-51f3-53a2-a2a1-a9095e9e7a43", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1dfa3c1f-5dbf-5afa-be72-bea05a8b9a93", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:813c76b6-ed69-5554-8a18-96acdbf257ab", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5e795594-288e-5814-8b91-e790d51ed781", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7ef920b9-b5ee-5d51-948a-3fc78250548f", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a4be5cd-6abb-5619-b18f-92093d8ec60f", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.3.29-tuxcare.5 of org.springframework:spring-core." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@5.3.29-tuxcare.5" } ] }