{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5844dde4-fed9-591f-b802-8d12c17ce043", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2", "version": "5.3.33-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:c22b4464-e230-5529-a217-edaf0f12112f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:af3c8b70-5a08-5034-8457-79bc36fb027e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:b92b4502-10f1-52f7-9352-0ba4ed2450bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:a14cade8-f443-578a-be5b-bf335c191184", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:1ea6e065-577f-56d7-bdde-42ab7fd29b16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:fd3c6b70-3267-5e6d-a3b2-54dd6d4a4745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:529bcd93-710b-5e1c-b648-643379371e3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:761c1b88-1ce6-5a12-aaf7-0d0a9467ee79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:3401fc19-0dd3-5366-9d4a-b6cff2d62000", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:8e9bc5e2-1556-5ccf-bfd1-c488301df131", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:cf8ef98f-8245-5625-95bf-c4568766f4df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:855c6915-69fd-5d54-8cbc-5dd62882ec17", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:833ba6d2-b80f-5c2f-b2d9-9f398486d2a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:8ff1a616-0763-582b-b713-f83bb1a3b599", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:ec3fd52f-5daa-5c51-99f6-798bf7519bbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:cefbd0c1-cab3-53a7-a8e2-42e6358a9bc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:45d391a0-0af3-5737-9ae7-275b3ab3ad9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:9cfc95a8-76e1-597b-a99f-a9801658a605", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:84068a20-12c9-5ac1-9663-d8e4170cd65e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:4c2e7ffe-6e1d-5074-8fc5-c6baf12eddbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:eae73d20-ad07-5716-b048-42d35957e174", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:8cfd049d-95fb-5421-865f-41875cae0e57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:2baceabc-54f0-5612-847e-495e2b2477ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:65f6ce7d-3864-58c0-8474-0192d9e1bac5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:7e49cc7e-2d48-56cf-80d9-a5c0dcffaccb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:ca63d8eb-4fe0-55de-8f85-131f5ad16b24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:19cb7607-6bd9-5b36-8ac3-5ec747d5167c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:411b2052-891c-5f34-b92f-37f106336deb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:b4eeb67e-083f-5138-886f-2281efda6a7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:1fc007f2-1e9f-583d-aa7b-a494f967cd7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:539efe17-7c23-5929-8479-d468a4ca44eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:e8a4ff43-5f51-53e9-a910-8b79d1d559af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:ad6cbd08-83ea-5bca-ba1c-c5fc0fc52cac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:b2318844-148f-5063-9485-9096829e4a29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:5a236d85-cc9e-5c42-9ecc-477335956dcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:617863db-a37c-5aaf-9cb7-23b2571e7882", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:7c2fa3fe-c6e5-57a7-842a-8ff13dff58ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:1bb442f1-e89f-5686-8f9f-666a81e7f3c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:dc1ee123-ca1a-5878-bdfe-e88fea32386e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:84834c8b-600e-5a01-880f-36f23baab648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:4f9ac8c0-86ee-51f3-b335-72d1b3a092a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:cca303cc-ed0b-58e5-8bb7-2198bd28d781", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:79201d39-9b4f-5425-b0a5-847742a0e55b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:9621ec13-2370-5fd5-91d7-6b281f8b83c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:b7eecf33-b5ef-599a-a30c-f4c18f74ca5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:d00ff2c1-cf76-504e-adc6-e78dfb4d48cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:e51c8e0f-a235-5902-806a-e8537daa841d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ], "bom-ref": "urn:uuid:ba7a45fd-cead-5e66-b2c8-8a9ea6dd4459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.33-tuxcare.2" } ] }