{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5bc8afc7-d792-5fb4-8309-4312b100354a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.0.13.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:fd7fc104-b9f5-5b13-be8f-7e2ef7020f37", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4ca50967-ca5e-5c43-bfeb-af806cca01e4", "id": "CVE-2020-5398", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:47d58293-31ef-5040-84f5-a7c64c8c7d06", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c436cbb-4276-5bb3-996b-aa1c166a3599", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c1a2683-68ab-54ae-987f-f730d5709238", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2a2bfb9e-dbcf-5eb6-a492-60f7595271da", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:de687861-6d8b-59e7-b660-6ddce48f484c", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:242567da-2c1a-5a7d-b0ca-26da0b444a9f", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f241d154-e476-5d12-93fd-5d63525e575b", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12118aba-aebe-5d18-bba7-6efdfe048b21", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f78bf7ec-9ac8-5046-a5b6-409b1673f591", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e9a5f5b-6617-5f88-bb52-670f7b3db95d", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:33ba7c99-959e-5ed8-bce1-15b735bb2811", "id": "CVE-2024-22243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:84c79d97-cef4-5781-83f0-c1245bd17a95", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:87f0dd86-ef6b-5b7e-b9ca-32a6081c1509", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fe3f395c-8b8a-5961-b783-b3de4a150092", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ed9de40-8f01-511d-8687-1d14d513f53b", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:83a0c6fd-8720-53f5-8a48-5a89de8d213a", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:560284fe-9b9b-567b-837f-32d1d768c8bf", "id": "CVE-2024-38820", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support. not_affected \u2014 Target version 5.0.13.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() calls that were introduced by the CVE-2022-22968 fix. Version 5.0.13 predates CVE-2022-22968 and uses case-sensitive field matching without any case transformation, therefore the locale-dependent bypass mechanism described in CVE-2024-38820 cannot occur." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:19c38a70-dd27-5890-b1e2-e77608356601", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:772f69cd-1193-502e-9842-ffa44a9f0731", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ae4e532-9764-5598-bdf6-97b2ea0da87b", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1723e32c-3674-585d-835b-f1c7a77d6c92", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9a17746d-096a-5b41-9c12-eed341105ba0", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3c65afe-a325-5aaa-aac2-94080ed0488e", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:106bbcc7-9115-5925-8981-ef45f34a54a0", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:49d200c7-353b-58c1-a761-be617447f51b", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f1e5eb7-1dba-5870-ae67-ac1f757f2ed6", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dbf818b3-0381-52ac-945d-a723ddce80b7", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9f60608a-9b9f-56f1-ac1b-2d76d83b9b85", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f4950e6-b441-5130-b908-c1ba840416c5", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e678bbc-68cd-504a-8162-fa682de2031f", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0b85ce6-2e77-584d-a977-9a6d92b73a70", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2325a333-94e8-5085-8062-df99e2d5c61c", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d526b34d-8451-580c-a555-10097a80ded4", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7ad9413d-ebd7-529c-b287-5e2b7f916fe4", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.0.13.RELEASE-tuxcare.1" } ] }