{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:db2246e4-9d09-52fb-a940-aff56eb095a0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15", "version": "5.3.31-tuxcare.15", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:8d7c19f2-458e-537f-a8f8-39c057227b98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.15 of org.springframework:spring-test and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:3277338f-620b-5ed2-870b-8e500def7655", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:a9da1426-52d3-5ea8-b5e1-19b19612004c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:ed4f6902-9b9f-5e87-ac28-810bc0806cfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:b4aeb351-9d08-5bfe-83e5-48b3141947f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:d092cd5b-c8cd-5e91-a539-082f6ef24e05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:25c3daa0-7acc-51cf-a8a4-c57a3820e38a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:b1805198-f47a-52f3-991c-cf64a327344b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:e2a70e54-da62-5ee4-90fe-9f3a10ca6029", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:a9fbe2d1-15f6-5339-8ca2-e585744092dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:8a1f51bf-5274-5eb2-8aaa-c36cc9914f54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:a0799714-d583-529c-976a-3fa14c5a188d", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-test 5.3.31-tuxcare.15." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:13a90e07-4394-5cb7-bae5-0b65ea5df49e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:b91d3705-aed3-5b0e-a1a8-728bbea72a8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:b34a7ec1-7cb6-5107-80c3-c67196df9473", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:1a63a400-14db-50e3-83c8-a5982f1e094f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:e26a1723-2057-5c52-9144-4cb31ebb7c54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:4cdd4f82-1e8c-5234-ad78-a0d7822bfd40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:d68af016-3108-58e2-bce6-1240321accc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:c9f04e91-f6c7-543a-8920-d3b2371e4ff5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:1a4aa987-31f4-5773-92d5-ca1f4e912a87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:a2b8ee70-9337-51a1-bd93-2604b36dbc27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:6daf8f6e-2396-594a-a9e7-890f6d7b5bf5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.15 of org.springframework:spring-test. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches.", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:c854d803-ae3f-58cb-9c40-e60e80269b49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:3f296dda-c6e8-5abf-b931-967c0234f843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:c91d2c00-d137-5797-a43d-fbcdb3b4e10e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:b78abdcd-2ecc-58a1-9bc9-57ccdf6ad071", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:3f6e72b3-b05e-5db7-91eb-e6bb017255d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:c2f9e23e-4f1d-5f38-ab41-bb15ba73573c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:82765848-4172-5536-a610-6e4b1818c171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:1fdae123-8c09-5cc0-add6-87f0fa559a11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:e8851a84-f8cb-5499-bfe2-db855d5b0641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:4016365a-88af-573c-9f7e-72775bdbefb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:cdc879e6-cd4c-56ad-9120-92780d2ed751", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:c2ce2ba3-fa9c-5295-99c4-fce8185b3813", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:18f9d09d-5680-58b3-9811-8a58e9e3320a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:c11f1d78-63d4-5cf3-baf0-c67aba6d04ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:e9fd6447-516f-5bb5-904c-a5cdc7dcda49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:ace3990a-2c7c-5c4e-a1db-45e187dc2117", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:3c372513-1dc0-5040-85a6-38881e2c81f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:35f1ca09-4e46-5134-853f-ac39eeb32b05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:6d0e306e-09a1-512c-b2b7-91488fc85754", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:665aa9a2-45dd-5205-941e-7cc362a7173b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:276eaf12-29a0-5536-9070-bdf868b25f27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:cb0c7477-e707-5aac-bbb3-af8e348d363b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:89b9a4b4-3f51-5116-b4a6-96ce6b1328f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:6fc0cd44-d08c-5fd1-9178-ba5339172152", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:27b49288-8fe9-53dc-a40d-8c793e7217f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:7c364ad1-d5aa-5483-b9ee-6c5fc83b3d49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:f37ad66b-61dd-5ba7-8688-2f438de8b0d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ], "bom-ref": "urn:uuid:86110639-3555-5d00-9eb2-314dc3b3c67d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.31-tuxcare.15 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@5.3.31-tuxcare.15" } ] }