{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b0b3d7d5-c771-560f-a6f5-9175c97dcb6a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-jdbc", "version": "5.0.13.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7e593c0c-1b61-5277-ba54-905d64d7e747", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eb27112a-642a-5dbf-ac31-40f3d896a52c", "id": "CVE-2020-5398", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:890e9db7-90ee-56f0-b1a3-6b82e23ade18", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0ddd6c82-3334-560e-b916-263422e3ab57", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c79acda5-38f2-56fa-831c-2f3b6c8f5c83", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7d1f51cc-0cce-5e9a-9773-1a4d5672c10e", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1da2821d-f432-52a4-9187-ea45ae9e0a42", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:168d9208-5407-5e2b-b628-39eded4152ce", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:70de0a7a-a16b-57a7-bf8d-4d300619d8c6", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a006909-16cb-5274-adf3-85e46cacaffd", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9e07718e-dc12-5f1d-b01a-ba1819312659", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:dd3e01d0-00d4-5c02-b480-d8c357bbe8f3", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8f452c07-2be2-5620-8991-9f97f56f6368", "id": "CVE-2024-22243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:de1b055b-ba7c-5af0-8a2e-570624577ed7", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:796b5bfc-9ed4-5f20-a806-c49e24e3ec23", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92231d3d-6103-5d6d-8f29-443c6024bcd8", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a80e5e86-9d40-52b3-b4ed-11dc138773c0", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7bad0150-a67a-574d-97f5-52e9f36e83ab", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4198401a-81f4-5ca6-9a6b-98489d0aecfc", "id": "CVE-2024-38820", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc. not_affected \u2014 Target version 5.0.13.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() calls that were introduced by the CVE-2022-22968 fix. Version 5.0.13 predates CVE-2022-22968 and uses case-sensitive field matching without any case transformation, therefore the locale-dependent bypass mechanism described in CVE-2024-38820 cannot occur." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5a5320ef-36af-503f-ba75-468bf4b0e008", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1670fb20-89cb-5d1b-8d74-bf55c64b42e5", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ad6b78d7-8c52-5c44-ae3d-65b84bd6a6ea", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1ed4f760-fbde-560a-8815-17e7ec93e452", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:25f9b3d8-99b7-55a1-89a9-c8b225e163f0", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec58053f-cd2e-58d5-a9ab-3a5021849a10", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e23ffff6-13eb-5557-b69c-4fda22e162f1", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:06713567-69a8-5f21-9fe2-869b06a9f49e", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:403eb7bc-f903-5155-89a9-703409bb7a51", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:052fe49b-12c2-5c73-9ce6-b10c43a51482", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f98fb752-6cf9-5ccf-a885-90fda4b7de17", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1150558-fc0a-5df5-8e7c-54aafd1f318f", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bc579a2-4cbc-513e-887a-e433ff453978", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a84f5ff7-fe7e-535e-9747-85c74e5eab5b", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91010af6-d85a-5093-8f68-a16f7f0c7a7d", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5faab8a9-430d-52dd-8721-ff8dd24a047f", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3c446a09-da10-5455-8b6a-36a3e9f0efef", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@5.0.13.RELEASE-tuxcare.1" } ] }