{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cf5e9ae9-ec8f-5433-93cc-0633e5227c2f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "4.1.7.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:171308e1-af3b-520c-bbc1-08d68e3b8aaf", "id": "CVE-2015-5211", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2015-5211 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b73aa518-32cd-5adc-8da1-0e5ca79db7f7", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1961f71d-9815-5b97-b282-adef6d879e8f", "id": "CVE-2016-5007", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-5007 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:757dfbb0-df49-5160-89de-35ffd1774bc8", "id": "CVE-2018-11039", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-11039 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:75b06c97-e17a-59d3-9f64-a60fb5d6f4dd", "id": "CVE-2018-11040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-11040 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5c699b87-2538-5ee9-bf4e-2315c9f3e125", "id": "CVE-2018-1257", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1257 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:391a0531-5df9-5535-935e-e0fc2e9cb90b", "id": "CVE-2018-1270", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1270 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e6eb4563-fdad-5cf6-a0af-556dc00c138a", "id": "CVE-2018-1271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1271 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1b23491e-1f2e-573d-b69a-60c8fbe7e27c", "id": "CVE-2018-1272", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1272 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f2f1589-33cc-5777-ab8f-d9bf38f01409", "id": "CVE-2018-1275", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1275 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8fa0fa9d-c1fb-5c7f-8eda-c9f6f1de776b", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:02bf75c1-8ec0-5131-b4e1-e160a807bf27", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:549462d7-fbf1-58d3-a187-ab71e317c1cd", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0b264f89-9d1b-58c6-a063-8567f2fe809b", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8d9599c4-70f1-5f1d-879c-7c901ff36d56", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:64e31764-3890-5e22-a76a-90e1e1c5e8b1", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a410fc5b-6a71-59e9-b200-728c387072c5", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fb98223d-7a1e-5d2b-a30e-ab66a7151591", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:32fb33e8-56bc-5281-87f5-cb436abbd054", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:41ef94d1-bf1f-5459-a674-498e2e61b809", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9c4f1f4f-8063-5a2e-85e8-2fb53fa4ea53", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4742b6fe-c35e-5d34-9927-6a9c4ff19f86", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:85da029a-4ff5-5de3-accf-cfba6f8c582f", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0ad69fa4-2b62-58c8-bac9-1951dfe1a9d0", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:19dd9595-4359-517f-8db0-01b8c79fd4f4", "id": "CVE-2024-38809", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d79ec532-1231-53e3-81c3-7549ae49143e", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:afb0a767-3a00-54d8-95be-edd2846c23df", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:750c22c8-a650-501d-ae1b-bf83123cf457", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:02f0a76e-22d4-576d-a45a-def275c6ed25", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5e4a50cd-bd93-5b2c-9317-fdbe73ffc862", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:731511fc-c6e4-5fc4-8727-b44fe36b2269", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2b056bc2-fb3f-53c5-9806-6726b6611c7c", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5eaed229-a4a2-52c9-b0ba-29ee858c5a83", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:69a8b20e-92dd-57c9-8b9c-eeeaeab7d781", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:85028dee-dd5e-54fd-9a0e-3d2c2a167255", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:20e52043-7c21-5f62-9da5-a2e9fa1852b6", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a7e57aa3-b1d0-5ce8-bed1-052306a7bf9c", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:47dd0366-7c24-525d-be2d-732b66059351", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5c63d2da-7b86-55b7-a0ce-ed032bede3df", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:755c7210-e585-5035-9b14-03bad5fee436", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a5656252-3cb6-595c-8322-aadf072be363", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:51c25e10-3424-542b-bdac-4a017a6e0442", "id": "CVE-2026-41852", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41852 does not affect version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test. not_affected \u2014 Spring Framework 4.1.7.RELEASE is not affected by CVE-2026-41852. The vulnerability requires record-style property accessor support (empty-prefix method lookup), which was introduced in Spring 5.2+ and does not exist in version 4.1.7. While this version lacks void return type validation for getter methods, it cannot invoke arbitrary zero-argument methods as described in the CVE." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:73c68a70-ccd9-5153-8ffd-4787740771a3", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2440a916-e0c9-586d-b393-652113149844", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 4.1.7.RELEASE-tuxcare.4 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@4.1.7.RELEASE-tuxcare.4" } ] }