{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c78b4054-782e-5c67-831e-0b463c877dc6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "5.2.13.RELEASE-tuxcare.2", "purl": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2dd33729-9c29-5304-b4cd-c63af1311918", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d0e42686-6b8a-5f55-aac6-2c11856b68f8", "id": "CVE-2021-22060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4f1ebe87-4798-5ebb-9b3d-59d2ca756a7d", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:a59158d7-444d-5e4c-badf-fe5ed28741a0", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:6afb8117-0e8a-5a67-8bb3-7996c9355e82", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:cda16027-3cac-5a33-b0ec-fed75ac1caf3", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:54185433-301a-5bcd-b8fe-37b33a4357b5", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0d816db2-45c1-5a83-a187-be07c3bc3425", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:384d645a-fc2c-5ff9-961c-e9567f6fca94", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:29dffd45-df61-5de1-ac7f-9eca1dedaa55", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:2374231f-cbb4-5450-ac88-83a65653f503", "id": "CVE-2023-20863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:20862c15-c99a-50ad-94f1-4a5bd7d417a3", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:614e721e-15f8-5f91-a104-4a021964c672", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:7b4761c7-1c97-5bf1-b72c-fb0f7988ee14", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:38098548-7f92-5144-99e9-7506e8a7ee4f", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0332ab97-7923-5ae0-a565-438e58de5743", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:921c3b2f-313f-5879-9b43-3d7d116869f5", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e26b4b17-6846-5b5b-b67b-21f7419cfa05", "id": "CVE-2024-38820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:4a837214-e645-5380-9ce6-f6c981f2bf1c", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:0eb3a718-d4c2-5ac9-819c-9869b085edb9", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:95bf216b-b844-5e39-91a4-a87000a64b38", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d6e66771-dfa8-55d6-b20f-362d9856adc1", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:392c52d0-5364-5f31-8e9d-7a50e55a5326", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8ca58821-bc30-5090-b609-a170656a0c01", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:41420f5a-59e0-53fc-91a5-8c19048da2bf", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:69eca453-fc03-5584-94fc-4f1dc50a7606", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:f15b573b-beea-5115-a0f0-95fa84d02b78", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b18ced5a-1a62-5c89-8ca8-ff8a5dbee262", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:bc457834-ee36-56ec-853e-3356cfdfc7ba", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:64f20821-79f5-50aa-9818-ca0c775ae71f", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:ceae71f3-a3cc-5bd0-8343-7c760977e331", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d5679814-00c9-5e74-90b5-ca91ff609179", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:d9073493-3f7f-520d-b10f-7303d0c52d35", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:b431be2e-1600-5bcc-a37f-3812ee7e7bf7", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:78e02565-199d-578d-86b4-1d312f981e61", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:e69e0f24-fa81-53af-a0ef-785b3b4a5b2e", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:852ae1ac-2771-5a46-8a58-790c4e27f5dd", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:49fbbe1a-8ddb-5b50-99b6-10c871e1a445", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:c11c5fc2-3178-5bf6-a55f-542966b76717", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:56eef0fd-80cf-511f-a167-0dbe39ec0911", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:8b9fbc9c-a192-52a3-811b-6091be330460", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:797e57f1-a212-5612-b770-866198ba0141", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }, { "bom-ref": "urn:uuid:54c57b51-8d62-5972-9f7b-e7adfcf9d449", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.2 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@5.2.13.RELEASE-tuxcare.2" } ] }