{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f6b29c4a-eacd-58b7-b7c4-5258ee34cd3c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1", "version": "5.3.33-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:51c46846-76b5-57bb-9357-f81d6fdb0581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:13fa584a-713f-5b39-b612-96e697f256f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:72c09015-92a7-59d5-aee0-7bd7dc09a673", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:763ca4e5-cce9-5324-8a2d-22ec16041f1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:26a0cc0b-e721-5cc5-8df6-b4b5d5b86955", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:daf390e4-9134-5f26-a0c7-1a2fd901c6bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:c791cdb0-c77f-587d-baac-5919ff83c455", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:cc0fac3e-1501-5318-b42c-cafcdcef2712", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:aa7e96a1-4fbc-541c-a1cf-3ee1125a6601", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:307f732c-b1fc-5304-b06a-769ce3d07d06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:79465dd0-42ed-59e2-858f-50bf60107f4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:b1e3a6f2-5ac7-5cd9-a3c9-870168f807a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:3dfd4067-58ad-5f79-8d9a-11c64ef876cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:6a168c02-20c0-57d5-9544-75c65f791363", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:6bcaad9a-dd7b-528a-99d3-bd4b011f9413", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:dd7f312e-e201-5890-8fb5-19b4f6c5937c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:ee828a43-ae44-5be1-b1da-74bee4d222d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:91dbec82-09fa-5ee8-96d6-25f45acbe7c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:499eb418-dcfd-5556-a1ab-308908cf7d53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:d89f3dd8-fa61-5ffb-b3a1-ceaeb6b2f241", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:16f3830c-f699-56b6-8bf7-89dc45a0a3e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:2d1794ab-4bd4-591e-a774-4e1a9077d13f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:b424d893-42a6-5b3d-9049-591fa0619356", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:86965734-5f9c-524e-9dde-1d0d6cb3b2c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:1097c021-516e-57b2-bc94-062a600cc32c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:c71e1098-538c-5fa9-9f44-6f041fa0882c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:f6215503-539b-5064-b60e-127465e7cdbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:be140aff-c7e2-505b-a845-526dbf44ab74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:704d67f6-d21c-5c4a-923e-a9e23be2ee9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:12c89548-00cf-52c6-b099-3f65a189be3e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:6719c77e-7898-5f8d-b461-99be1ac62798", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:2f114476-ce99-555d-8faf-46c6235c9fb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:6f4ab98d-97e1-5519-b918-fb19fb2a3ea6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:593e402a-cdc7-504f-8d25-abc7ac2572a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:c1aaa9d9-1246-5ec4-9030-e1b777ff7d88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:3a7a1148-9afb-54bc-89b2-dff297cddd4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:054a72b2-b44b-53ca-beca-f15d002aca3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:290ab123-0988-5c12-a57d-55ba71ec5a9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:d0862adc-1eb0-533c-8bb9-f4bb21a22b49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:3019f201-bb75-59a5-affc-ee77960a313a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:0d9d129e-3b5b-5617-8c44-81e04b1c7ea7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:85b247e8-c2e7-57d2-8b73-c3eec24ac2f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:5b82c849-97c0-53cf-8e43-f4405982d0c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:39e06bab-6783-519b-8a73-ed4d583d40b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:7aab351c-0934-5213-9667-bb44bcc19192", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:ab4cddd5-64fb-517d-adb7-6b90db72a8d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:7652b942-31a5-5c30-a84d-b544aebcee99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ], "bom-ref": "urn:uuid:f87c1319-9112-52e6-82b2-89dbd07bfa83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.33-tuxcare.1 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.33-tuxcare.1" } ] }