{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e14c9e76-cddb-547e-98eb-e3d5d8873d51", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-context-indexer", "version": "5.2.13.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a8c18e5f-5e2f-55d2-8723-760c372dfa97", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ff9b99b1-808a-5ea0-a7a1-7bdbf7001f38", "id": "CVE-2021-22060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b6001725-668b-5973-802b-fab80580d670", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82b2bc98-f872-5974-9444-562f0d0e3c3e", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dde13304-61a9-57e8-bee8-99678a61ceba", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3c4a7294-cc5e-5867-bdbd-690444cbc7d6", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:540b83b7-20a2-53e4-8319-acf2cc8856c8", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:793dced5-4a8f-547e-9af5-f6fe6d9a030a", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2c302f71-b742-57e8-b12a-2181431a4b52", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a2b2056-12cb-5583-b5a5-c0dd70281ef5", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cb8efba2-06bb-5ba8-944a-2d3962113c65", "id": "CVE-2023-20863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f10c3b09-b0e8-5727-9232-4e28e6411597", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4d8dd3dc-8be4-59cd-9209-671b4b0584b7", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:83cd9ee2-3f77-5288-a802-91e63a47f501", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3609fa89-813e-59be-9356-8997052e0fb8", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5795e5b0-3bd1-5c4e-b5f4-bad2243465ac", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4b179f0b-9080-5e36-94cb-573c06aec003", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7a721a66-f8a9-5f83-9d30-7fb7948e592d", "id": "CVE-2024-38820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8fc10695-0770-53b8-b0c0-9072e240b026", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6f2b135f-89ce-5770-bc0c-834717a08148", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f547f9ab-4404-5377-af06-4eda463ce686", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bced77df-08f9-5540-8bd7-68909a28397d", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12fd2580-54f3-51fd-841b-2f7d5f3070c7", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f3048594-1a7d-52e0-a7e2-5abc4e6424ba", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1a22d571-78bd-5eac-aa48-36db28211305", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:58efb426-9718-5964-96f5-29d8eb1c7f71", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aa537332-dbdb-57dc-b23b-45806faaa70d", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd32bb87-8278-563c-bb1a-49cf5cb80351", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c473bd6c-126f-51a2-a937-d7ed24327c78", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:426179ff-8d65-5568-b8b4-5aa8d219917c", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ecb7052-74a2-566a-af74-406ee9d98310", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6eb56aec-9cd8-524b-966a-ce8ea02ff346", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6e397584-8b0e-5071-9461-26050b302fa2", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5af917e5-5037-51e1-b375-46b0cc3e0c05", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:80b33d2b-6dc8-5a1d-a6b5-87a08753f208", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fb5c06e9-6446-5b0f-a5d9-fafb4f3b5925", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a381b22-b6b9-5534-89f6-f5b932406802", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0b22fcf-3b22-5d61-9038-046f251ff963", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4ee46342-f19e-56ce-afe6-844c9e117c87", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47ce8c79-5bd5-55af-a080-c2dd0b42b2de", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0755170e-3f59-5002-9f08-7f879480df6e", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:57205267-59b1-52d6-ae0e-77a4888bf762", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:36a0013e-1827-5765-955f-83817d8fb4ba", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.1 of org.springframework:spring-context-indexer." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.2.13.RELEASE-tuxcare.1" } ] }