{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8de5f80b-5960-5314-a1be-00617319d0a0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11", "version": "5.3.30-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f5b0ba6f-56af-5116-99e8-e82793726c3a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.11 of org.springframework:spring-test and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:7109c470-5f9f-5f8e-8cd6-bef4d8d4ae7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:d68f8482-bc76-56fc-bcaf-40a319f2e2ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:283f4feb-8edf-52aa-843c-aa0876bd85c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:d36975dc-bfcb-5d02-a45a-a4ab32fbd36f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:488f34b9-6841-5edf-b5f7-158daab7f744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:eb562d40-f1f4-5e45-aa01-fd1dd1cc7eb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:24acd34c-1792-54f7-9c7c-a0472e22af4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:36e0cc99-0cbc-50b4-908c-16bdfacd41f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:5e273e25-b9d3-5c9d-b17e-1deeb662da4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:a6bd25ac-fce5-5a55-b5bf-28fe16fde1ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:2751a62f-94bd-557f-854a-397332abefc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:91d3ef76-6287-530a-b14e-a67dc449535b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:cac1f0fa-31fa-5e25-b528-8505b2496ab5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f2bb52b1-fb26-52c4-8a59-ac6ac1848609", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:e54810b1-cac1-574b-bd1b-66f11f616e04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:d263c132-c663-5c91-b137-dd3a182ca5bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f846d22e-f596-5de7-a3d9-4945581d3455", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:4af25e11-3bc9-5adb-a84a-ca85a17c8202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:14c5d5f9-f78e-5c59-981e-ee75a0041f20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:1aa30827-723c-5b60-82d7-3404596ad6fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:e8f6e7a0-7374-5b5d-811d-99dd0743b4ac", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.11 of org.springframework:spring-test. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:c09a89e5-94fd-52a6-8025-b5092fd8bcd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:733f6726-0c13-5a6f-9429-78012182166e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:83e1d37b-ca6c-5f65-85ed-841fb5424c84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:82f552fd-cf77-5b28-8f04-81573ec0ab17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:e71968fe-c44f-51e8-b260-7050af1c8a45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:bc895960-1923-501d-8d70-6586d7faa0c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f809783c-f030-5b7a-9417-eb82060db1b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:072fee32-e4c5-5689-8874-6e5c43a9b3d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:304b34bb-02e5-5fee-9183-ea40b6d429d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:1a52513d-5128-5109-a2e1-a43ba442d039", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:a72a24c7-6a41-58d6-9331-1d8ccad408e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:e4a8c8b8-ee3f-599b-b248-39a50f5c8f6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:03859327-f7f7-5824-8eb1-3eab06bbe093", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f105929f-1e5b-5b78-812c-0db860017984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:6e6762b2-401d-59ca-ae31-22edaac676ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:aa60ef53-a5f9-5650-8c5d-b1d1c66f8c38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f9cabeb1-b058-5954-b96c-f21207c3b655", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:9d196b32-33fc-505b-87e7-720bbc0ef685", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:3cf127c0-2c24-56d6-8250-547bd6a22b98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:3d198e5e-8840-57c9-9349-3150cf2c62e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:0cc9faef-daf2-5825-885c-5072e55d0127", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:3d309a11-c603-5dac-9ac5-dea9e60e1018", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:aa58b835-ee6a-586d-acf5-8b4091b0a022", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:704ffbd2-9ee5-5eb6-8b2a-62739bb0c1a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:0d8c94c7-2858-5ae4-866a-aa282ebb228b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:5f15ac80-d7ec-5017-9a4c-9fb16e19219b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:6e881c43-39e3-5f67-acc9-94653452823c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:e3fbb43d-dda9-54e7-9550-81a235d08da3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.11" } ] }