{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fc4623eb-3d06-544d-9ac0-6e858d4da8c5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "3.1.1.RELEASE-tuxcare.2", "purl": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:62817971-c247-5776-b88d-eeaa4a834edc", "id": "CVE-2013-4152", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2013-4152 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:13f1f406-5df3-58df-b3e6-f8a55a71b0fe", "id": "CVE-2013-6429", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2013-6429 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:592b736a-8de4-5bfe-9edd-107c6381e02e", "id": "CVE-2013-6430", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2013-6430 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2f9e3710-0495-5f22-b85d-185f2422546a", "id": "CVE-2013-7315", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-7315 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5e968cb4-48e2-5db6-a456-0d2baaff5283", "id": "CVE-2014-0054", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-0054 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c50706a8-28a6-5063-ad95-12abed3cb5d4", "id": "CVE-2014-0225", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-0225 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:561f87d9-530e-5d1a-b63d-a7d43e00a0b3", "id": "CVE-2014-1904", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-1904 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b784b12a-f09d-57c6-85cf-6b15507813e6", "id": "CVE-2014-3578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-3578 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c44bb905-8dac-55fb-bde1-6121c6e33750", "id": "CVE-2014-3625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-3625 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d8fc57ec-b712-5d6f-819b-c923deb9077c", "id": "CVE-2015-3192", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2015-3192 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f024e54b-7b8d-5533-a76e-9d34ebd49e27", "id": "CVE-2015-5211", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2015-5211 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7de59987-4771-584c-ab9e-435b0be54083", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:84e09a0c-2efa-5062-b64d-1982a2643e66", "id": "CVE-2016-5007", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-5007 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:389b5828-e5be-5957-a954-fb7cb3dcd6ee", "id": "CVE-2016-9878", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-9878 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dbc1041a-9740-5bb7-93b2-5b23bb71c10e", "id": "CVE-2018-11039", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-11039 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:99290ddf-16d5-5d98-a639-68537ca50187", "id": "CVE-2018-11040", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-11040 is a false positive for org.springframework:spring-context-support 3.1.1.RELEASE-tuxcare.2." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f2b064e6-6549-5140-a8ac-2f2bf0cf73f4", "id": "CVE-2018-1257", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1257 is a false positive for org.springframework:spring-context-support 3.1.1.RELEASE-tuxcare.2." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c1d164ac-a51a-57ca-8488-67ce8e68aec0", "id": "CVE-2018-1270", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1270 is a false positive for org.springframework:spring-context-support 3.1.1.RELEASE-tuxcare.2." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e4ed6f3b-acf5-589d-8b51-5265ee07f4be", "id": "CVE-2018-1271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1271 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:207db0e1-c7bf-5322-8fe9-dd4cd8a2969d", "id": "CVE-2018-1272", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1272 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:9743fd61-c1a6-593f-a474-50b31bbb6c4b", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:81475c11-52bd-54f7-b9d8-94093e926e9b", "id": "CVE-2021-22060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bfa323ef-72d5-5632-b53c-0b638360b5c1", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:48b71119-df4b-537a-8d70-2ef81b473912", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0f4b5eac-e599-58db-ac8d-f240b6b37638", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cee6b3e9-4a24-554d-8381-64f5d0a3a281", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a1c30f80-ef89-576a-a0dd-5963900b4ad4", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3e2929ee-d96a-5786-992a-252a1c9dfbdc", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:fa0c7c23-ec10-5af5-8bbb-277a538c6b92", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4d6bfbe0-f4b5-5a9e-a73d-6b36ce5c17fb", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e5b42432-6fcf-5ba1-9b6e-a54188832759", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cb0f327b-6d72-5bd7-84b7-8006f71b8031", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f3544611-a511-5c67-9154-c2640a3d519e", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3ca08b1c-cfed-5218-b610-50944da26c97", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:79486016-632b-54bb-a71c-e1424968ee03", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a903399f-23ab-5921-a9f2-c5e38b85da06", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:760768e1-5654-5fe0-8d50-5b523ba8aae6", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:89a6cee0-0840-5023-afcb-c45d4138a3f9", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7a1b2abc-8bf2-50cf-ab84-2d401acbdf9e", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:38dddc63-fe5e-5c4c-be40-11f9c855c172", "id": "CVE-2025-41242", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41242 is a false positive for org.springframework:spring-context-support 3.1.1.RELEASE-tuxcare.2." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b4ec49a1-4d20-528d-9fd9-968f6b49ad9b", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:043ae171-a216-5788-a5f1-c231d872223e", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:adc39383-9d63-5694-a40c-f9b4267bbbd1", "id": "CVE-2026-22740", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support. CVE-2026-22740 is a WebFlux-specific vulnerability (reactive multipart temp-file cleanup in org.springframework.http.codec.multipart.MultipartHttpMessageReader / PartGenerator). Spring Framework 3.1.1.RELEASE predates WebFlux entirely - the org.springframework.http.codec package does not exist in this version, and there is no reactive multipart code path. Per NVD, affected versions are 5.3.x, 6.1.x, 6.2.x, 7.0.x only; Spring 3.x is not in the affected range." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2cb0be53-89e3-5c51-9637-473611e6bde2", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:870eaf02-7940-568d-985f-e737502f65b7", "id": "CVE-2026-41842", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41842 does not affect version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 3.1.1 is NOT affected by CVE-2026-41842. The vulnerability exists in content-based version strategies for static resource handling, a feature introduced in Spring Framework 4.1 (2014). Spring 3.1.1 (2011) predates this feature and contains no version removal logic in resource handling." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:5db7e6e3-06b1-544b-a30b-3b55e46f4344", "id": "CVE-2026-41843", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41843 does not affect version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 3.1.1.RELEASE is not affected by CVE-2026-41843. The vulnerability requires the content-based version strategy feature (VersionResourceResolver, AbstractVersionStrategy, etc.) which was introduced in Spring Framework 4.1+. This feature does not exist in version 3.1.1, making the attack chain impossible." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:dec81834-aab5-5b2e-8460-3667f877cc76", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7a35a574-b026-5cd2-b81b-3f5c60876b7e", "id": "CVE-2026-41845", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41845 does not affect version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Spring Framework 3.1.1.RELEASE (2012) predates the ECMAScript 6 specification (2015) that introduced template literal syntax. While the code lacks escaping for backtick (`) and dollar sign ($) characters in JavaScriptUtils.javaScriptEscape(), these unescaped characters cannot lead to arbitrary JavaScript code execution in the pre-ES6 JavaScript environment this version was designed for. The att..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f4bf3cf4-35fc-5b17-afe8-06eaf7ec8bbb", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7288fc58-130a-5757-a782-7c16c543ac54", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:eef850aa-ab12-5986-a191-8700850db67f", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:753cd9da-4950-513d-b7bf-68445feb6d57", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:3a16bc7a-e6a3-573c-87c7-2ff74a8b2dd2", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cbc9e872-f6f2-512a-a840-d702db9dfd6e", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:aaeb2282-4ba9-546b-b944-0ab77f0ec82a", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:856bb8a0-89b2-5bc7-b5a0-d632f4fd85a9", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 3.1.1.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@3.1.1.RELEASE-tuxcare.2" } ] }