{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1131da1c-fc33-54cf-bfc7-c6377d26af76", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "5.0.13.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f3f9cac5-4ee3-5bcc-9766-85ae53409d05", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c1b2da60-18ba-5146-b5a5-b19bc82cfdb7", "id": "CVE-2020-5398", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3cb821bf-ea0d-59b3-947a-c2dab7d3cc49", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8f415af9-7bf9-5b0f-8c06-728b0ba2e543", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ae49570-d3a7-5dcb-bbe2-dd54779fc2cc", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3ff4096-b36e-5e0f-9495-94f2d217aff0", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:54e0656c-1d25-5e70-ba07-0d3463f70757", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f41f2c64-91de-5d0c-81b0-7ee1a6c88887", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:182286b1-9df6-5850-9ddf-04f45fe6e4fa", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:96f3899a-2b65-5ece-a0cd-14d1f5fa7c22", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f3823574-26e6-5781-94b4-521dc5a5415b", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f09ec7a1-4123-542b-8998-15e205aac1a1", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2742c593-29ac-5233-873d-9c691c624eea", "id": "CVE-2024-22243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:997cc9b1-3a72-54c5-b0e1-8ec0a8b7022d", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:112dc8d0-84a5-5098-95cd-9e331cf1ef06", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:763acfeb-6a3d-5596-aabe-ca30cfc3a016", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:74a453ea-0bec-5b76-8b33-25f2fea940d2", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dc2f9bf5-38e3-598c-8165-8da0ccd3c922", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:10d51970-ac08-5e44-bc7e-91e0cdd8bebf", "id": "CVE-2024-38820", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans. not_affected \u2014 Target version 5.0.13.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() calls that were introduced by the CVE-2022-22968 fix. Version 5.0.13 predates CVE-2022-22968 and uses case-sensitive field matching without any case transformation, therefore the locale-dependent bypass mechanism described in CVE-2024-38820 cannot occur." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cf6dde70-c85d-5118-a8bb-5e0cc8db58dd", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:33883287-6d6e-56d8-9614-7f0899546ab4", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:02784cf6-0dbc-5910-a56b-2c7090303e9a", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:13059e11-d254-5949-b397-9f4468d49365", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36a895d2-726c-5c73-9c15-6a0637250b2d", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3e40425-00c5-50d1-ab9c-397b9b8a228e", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f30e72d-11cf-5c7b-a692-1a7cb3f5de28", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a74483d2-71a9-5a84-bff0-805abcef2614", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aba435be-2dcd-588c-b714-1a42924ce15f", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c63fbb33-94ea-5e60-986e-7f49222e9c95", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:49a3b85d-11ef-51c0-8b53-eeef853c2a3d", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:035b52be-ebcb-5401-905b-4b255da90af0", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:783c74f6-bef1-50e6-99b8-833e98ad635f", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:72483582-a4be-52d7-b280-4876e43bab77", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:39b67157-7952-55a3-b2d0-064635cf7a45", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d1d8f758-7185-54d1-ac16-d701e0f06c40", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:31063a08-8e0b-5898-bda6-487676337d90", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@5.0.13.RELEASE-tuxcare.1" } ] }