{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5b5c367a-20ce-5e8f-884f-1d27cc937870", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.0.13.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:864ff2e3-526d-5282-b0d9-130f9a59b3c0", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:04c4854c-0d91-5ec5-a14c-fd8a639507b8", "id": "CVE-2020-5398", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66827ed9-6a9d-5f18-8af1-5b75165b4500", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:798061fd-faff-5a24-8d83-c2916aa71585", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0f18c0c7-bcb9-5d8d-9cfa-72f5a96930be", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d3c056b-710a-506b-90df-862e16494cfa", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a21dd29f-fc6f-52a9-9bc8-b33e159a497c", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e874a33-e456-58aa-afad-57c16bab58f3", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e41bd49d-c8ec-59c1-9215-5a49802f0c51", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5208c7ea-34ee-5431-8340-1236fc444f75", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47b794a6-7b5c-5acb-92a1-ec4b5302453a", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:49a40e56-a0af-5709-9782-cfbf63e94fc7", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ce7eea97-43e6-5a7a-8655-ab620d58e017", "id": "CVE-2024-22243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c4452405-d9c3-5a76-b763-a6a5cf0c6f06", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:03108d8f-307d-55dc-9ad2-086cea4e77aa", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:13d40ef2-3b07-5bd2-a6b5-a0d4531bac09", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6b7fdca8-e328-5665-ab24-37919f71f9ba", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0547ea0d-6937-5e2f-8e2c-d8a13e559856", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ae3809e7-15c2-5c0e-a0a5-4e87c7461733", "id": "CVE-2024-38820", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Target version 5.0.13.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() calls that were introduced by the CVE-2022-22968 fix. Version 5.0.13 predates CVE-2022-22968 and uses case-sensitive field matching without any case transformation, therefore the locale-dependent bypass mechanism described in CVE-2024-38820 cannot occur." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:01e9da5a-47b2-578c-a6cb-dc6bdce58fd1", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bf8ced6-703b-5d0a-9255-8c39ce16dc9a", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66b98f11-6455-5715-8e71-7db039d7929b", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b5e9a1f7-e517-5769-a70c-665c6fa72c38", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cb2659c9-ae80-5c47-af1c-b1cb203157a6", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:818530da-206f-5e2a-8b9a-cabee3f4700c", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c5a095c8-e8a4-52a1-879d-94e7b1c773f7", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:890a5e68-9c19-5e92-8e29-b6afc3ced32c", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:11956079-907b-5272-95ec-775ae2eb5390", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d7a71c5b-7ab1-52cb-9c30-ab103737c16d", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b54017f5-0265-5b24-93d3-a9d632ecf72a", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66a71739-8008-559d-91b1-d6d3d116c92a", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87936745-17c6-5490-b8d9-4fda9735dc9e", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eea6df13-e91b-59f6-a5bd-e9088b51ad23", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:013a3319-1348-593f-b606-f09f9dae27f6", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28bf6862-b49e-5651-b2fc-43dd57559e84", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ffff3f7-c575-5beb-9936-bf2dcc541373", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.0.13.RELEASE-tuxcare.1" } ] }