{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a1dc5f99-5517-5368-8717-68dd5aaa8b80", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9", "version": "5.3.24-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:02dfe537-1899-508b-9059-606256be586f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.9 of org.springframework:spring-context and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:67a0216f-a492-5aa9-848d-265d833561b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:74496d8e-02a4-5441-b6f6-cce5106a3e72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:293cfda3-3204-551b-a0d6-c6ee69d7cdcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:2a6a8b26-b3d4-5222-a634-9eeb9e3ee3ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:75dfefff-12a9-5624-b395-5d17a82de53d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:d27076d4-dc54-515f-9952-38b45c144885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:0f70ecfc-24d3-57ef-8a8b-227999075ce8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:85e828de-5ab0-59c1-b197-4dae1725ec04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:e748c577-50da-52b0-b65c-f8a5b785e87b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:09199cf2-8c36-52dd-9fe3-d20dc2c4b82b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:7b93862d-5d52-5cdd-87a3-6ca753366f27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:6e94cddc-3288-55ec-a8ca-e6601c0938a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:6ee2c865-73c0-5f20-a701-4dea4c59f1f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:eea5dd2e-652f-58b5-8267-43b9f87d8ae1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:d5c0357f-583a-5f09-ae81-a01c2b25c91d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:30fb849c-6c5d-5b83-8e04-d91cb36754ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:7f41c6fc-6cf7-5086-b9fd-f213a03c7958", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:9834cdb4-305c-5c2b-af13-c1b38db4882c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:7bb580a2-dfa3-51af-bb33-27bae1e7cde3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:0f4faa1b-b95b-578a-b35e-69b42c30f158", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:3569388a-dcc5-56f5-9979-17660d52b41d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:e52d04f4-7fd2-55b6-b96b-ef87e82fd2cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:8db07aec-f54f-5ac2-8701-a03fd28345ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:c90a1cbe-d897-51e0-a224-79f62e2058f8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.9 of org.springframework:spring-context. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:f5c7ed90-23c1-5857-b64d-e8111ef91484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:301940e4-9950-5c92-83df-b87b921b51a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:021851cb-374e-50cb-9ca2-d8315ca34051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:85cbb2de-812e-510f-8051-7b2f8308b050", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:a268c35c-55f2-5a5c-8b4b-20a5866af37f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:d54e9ac0-1b77-52f6-9d4f-22c7bbef4129", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:9534c717-c8cb-5423-bf94-6c7d1bb589d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:d8fbc07d-fe9e-5518-bb3d-2d737687c32e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:77077e9f-e3e7-54e7-aadb-878ad7da1a5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:8910ea80-30ac-58cd-b637-3a50a0c992e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:b2dcf682-8e21-560f-baf1-50e874ac0803", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:cd93a2b1-c8a0-58bd-ab48-72f9ece83716", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:5fd11b4a-7167-5c49-a33b-979b0e8fc087", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:2a9d22f5-cdc9-5cd4-a599-60d1e18f0f90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:6a0ded9c-f4f6-5e58-b087-9726107c56da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:8f184397-ea9e-5278-971d-b12ea19ffd5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:51c46681-1813-5d1a-a3c0-739cdcdfaa62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:307a9bee-96e0-5311-abab-2dc8db0df40e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:6732f788-bb1c-53ad-b11e-56bca7dc11ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:56b5a08c-3516-5607-8dfe-e3ce230d98d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:65d39979-332f-5275-9b37-f534a6e85ed2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:f549e167-6ffb-520b-8993-536bb8b5503a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:a60fd316-ab81-5062-ba8a-7af0081cc667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:b460bf9b-1aaa-53d3-ba9c-01984f18bba0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:1a76bc1b-bab7-550b-8075-3ff0b0646e5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:08c676d0-7799-54d2-a32b-bfca923133e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:073276fc-c911-5f73-addb-2a1e5536d8d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ], "bom-ref": "urn:uuid:cbf4c857-b803-53a3-be13-e3bd92a0a3d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@5.3.24-tuxcare.9" } ] }