{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c6f1b891-d9a3-5fb4-ad35-7e9e63e0f1ed", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-test", "version": "5.3.30-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5e2e87f9-790b-5c11-ba5d-3b3e5f0046c6", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:626db917-dfce-5132-8061-53997745e857", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:97018e4b-a470-53ca-bfed-bec7c4fd15c7", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:61cf6521-3e9f-52ff-a8d8-89a14e7b04b9", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0598f24a-8b5f-5e71-9891-0b850e8d1df9", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:448b909c-568c-5c25-923a-544491755dfe", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:711deae8-a65b-531f-bca9-fb227c445673", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e9735173-43dd-5301-8051-dd33bdfa2953", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:807429c3-09e5-58a4-8ca2-4accd03d170b", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:55389a9e-bee2-5dc6-8f76-b01f9747c71e", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a622e499-2c5b-5def-8f05-b37ce1b1301b", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7cc71c33-e7db-5017-a9b0-5bc463b2f6e3", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:aaa518e6-d3a1-5830-90b5-59c540146a67", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0223b77a-1adf-5e7d-9c40-5c427f076f17", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:50ea5bb6-38f2-5393-9e20-f3237c34c9f9", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a2f647c3-1a50-532e-b2bd-a1b096828321", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:537c9eac-11fc-5219-94b7-8e575a3d3d65", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:80b2630e-25fb-5962-9743-fdad61f859bd", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0cf04fed-a050-52b1-8530-e6f8735117bb", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4614e83f-bab7-5dfd-803b-fdbaa634f593", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:93749c2a-25f9-5dce-9f71-23b416512251", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a6902194-aac8-5237-a9e7-54ac8c193709", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.6 of org.springframework:spring-test. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6ae640ad-ad94-5841-8779-1b2bce083f09", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ed83051f-0aee-56eb-aa27-5ae8494286e7", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:738e84ef-11c2-5a48-b95f-a2439f547698", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:96fc49ab-f512-5fca-93b1-69297f7e5a59", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:57ed762c-437a-5901-89f9-d768956f41d9", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ca306e62-cb5a-59f6-8f36-e1088eb8031a", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e1bd8931-84cb-5f76-a235-bd82ac192217", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d9b9ac96-442b-5fa5-80b1-fbf3edfbd56e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f79c6b54-2401-5ecc-abb4-7c776f08023e", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ffea1361-0445-557a-8642-3c7324fe8a6b", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b3b494e7-42a7-5d5a-a934-2e3b853c4d05", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f7aa3859-7c1d-5f16-9612-9c4e2a487689", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:106423bd-82a5-5202-94aa-5dac2f76219b", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:03cf8345-c56b-5da1-9bb2-bbd0a8e8f45e", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7a224bda-4ae3-5b0f-a111-5dc45e0f048f", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.6 of org.springframework:spring-test." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.30-tuxcare.6" } ] }