{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f94c90f8-5d9a-53ef-9df9-eee918c86f8c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "5.3.39-tuxcare.19", "purl": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:af4219ee-9638-5fd5-81fa-d3614291936e", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:a34a3f64-3d98-5502-a483-692715eafd41", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.19 of org.springframework:spring-webflux. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:eb4b368c-a15a-5f54-b4dd-ee6e0b02b35c", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b0750e86-5b91-5ccb-92b8-4530601b24f6", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:083896a5-d5e7-575b-ae98-d8006b0f248e", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:03ab78d0-d9c3-54f4-99de-46cdb840522b", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7bf8d75b-9f1c-5a3a-a8c8-bf914922a286", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:9978c735-e560-5b41-b53d-96ad0dca5e7d", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-webflux 5.3.39-tuxcare.19." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b6d41509-4acb-54c3-8a8a-1d311e73b945", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b343237b-eb4f-5b9a-be72-26f6f5c76fea", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:6b28e54a-a812-59ad-9c6e-6b0d4ae5e68f", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7a18d147-503f-5055-94e2-52ac19fdb94d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:0eb1b4ca-f7fc-5b37-aefc-4e78230f0251", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:f6b32cb4-0c98-5d42-a5ab-b60e4e14b954", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:94fe950e-f5e2-5b52-b085-54e174120f70", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:94a7f08a-d481-58bc-ac8b-6464e7addb36", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:7ed8cabb-a635-508b-8efc-e62a6d4714c2", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:836c9979-7ddc-5a1e-8997-a64286c745d2", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:dd9fe07d-4479-5170-8dd8-ab3d14dabebc", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:d1295280-3fd5-55bc-af4f-a4dae26b3cf0", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b3eba56d-568a-524d-b8cf-88b409de6834", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:d1ab765a-f0cd-5abf-899f-2a15cb6742ef", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:35aefdcf-23f5-5616-aab4-aabfb6955b9e", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:cd384c48-54fc-5d55-8d7f-f1fe076a9f62", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:2a878b06-c60d-53db-8674-1a801cd97100", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:5c8b7d10-51b2-5763-b21f-e9bf6550ca26", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:4c02b99c-a5ec-5a4d-934b-aa0ebe497fc7", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:51318f44-ac41-5bb9-9d95-36eead83d25a", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:b1a5947b-d634-523f-8d3b-955ac740616d", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:1d3c8ac9-05fc-5103-90c0-932ace22d0c5", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:30860877-3a65-5d3b-b392-05d715ace8d3", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:8ff904b3-6c87-55fa-b08a-1ce4db2aeba5", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:4968f110-1441-5f33-a27b-1d3567529efb", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }, { "bom-ref": "urn:uuid:c66e5bb4-3001-5f04-baee-9cfb375d683d", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.19 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@5.3.39-tuxcare.19" } ] }