{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:68b38f28-7898-5f4b-a3bd-44287f0a4f09", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11", "version": "5.3.30-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f8b13bde-37e9-5742-a44f-aa4844acc08b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:67db211e-7b53-58b6-9ead-4e8d020b9918", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:10aff8f1-1167-5f72-8a9b-6923957d94a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:eedac495-1e02-58dc-99f7-cbaff402ea02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:639394c5-83fc-5b92-b725-4256c48c9844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:e24f29cc-be19-5069-a20f-45caf91789f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:a6ca65a1-9024-544c-8beb-873b0250769a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:272e557b-d642-5c58-9a14-1d30d2940f1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:a215bf7a-99c1-551b-bfa8-4a887032e8c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:5ed5aedb-6175-5b3c-bdee-44fb8bff3f64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:23dd1614-1c00-5eff-9210-a8156ca4aa44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:927d707c-f744-5a96-8223-9d86ddf0bee5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:717eb623-018f-5121-90d5-a57b1b0772dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:18542f72-55ee-50d3-a6b9-64de6d443d3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:13ed205d-cb5e-5773-b2d7-6404fde459c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:7ba0252d-4f7f-5675-aefa-d874e7593532", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:6aff1118-9306-5e77-9f0f-10c44e75d8b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:70d52743-0ffb-5518-b44e-a326e33aecb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:0edfe45c-9812-59d1-a959-081a24e264fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:3fb1c066-1b4b-588c-93d4-056b7300e2a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:3386d44d-21a5-520e-a312-88e1f3323c65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:fc6e51ea-b7d0-59d1-acd3-61fc3773a10f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:2eb9a1c4-f091-5749-ab44-834b23b4f479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:1e56ab52-e8a2-5224-bedc-144f4b4e01ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:8eb69726-cff8-5ac6-ac42-3636f20130ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:5a4df653-09da-53af-a632-9c0ed25ced32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f41283ae-cfb5-592c-ae02-4708cbbd1386", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f7b7e4a5-e91b-57d9-9de5-66cf633fb4ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:caf60aa5-99fb-5426-b446-e3db24872e47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:776a9757-3538-5f01-8ced-9b6e567c3d1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:f42fdc89-9dc7-59f5-9dd8-4a5db9b2e9c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:2c6a27bb-d65b-5742-a308-50d776f34961", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:878936e9-57ed-5462-90ce-25dd51bc339c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:3df77bb7-9bb4-5149-9420-274e5c76cbb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:8cb35f91-5d38-5a66-be74-00dfe6fa0f7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:2913fc9d-e3ff-5100-b973-983a54fedb5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:ed5809df-a2db-5e79-86a5-0b85c816ea5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:0e64fac2-8598-58e4-a3a6-d80fe2bbe819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:3299dd42-e124-54ef-b8e3-ec0447bb06b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:fab21509-6fb3-5920-8261-7859e2f3a727", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:6191a349-1b04-5543-a86d-a2e9d6f44dd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:0229548c-b493-5746-9703-ec96de234b07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:c2458a4f-9bc1-5711-b872-bb9937bb500c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:9dcda1a0-f7d6-5138-8fdc-c7c732d4e52e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:68e1d013-0ef1-5205-84a7-9c71916f1c2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:669e02d2-308d-5d75-93d5-54391af5dbfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:b3ccd374-a1a8-5748-86a0-bc55027261b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:e16f52da-9aea-5aab-a3b5-96ed658a4da3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:6e5ddd91-b08e-5bf7-a1d6-cef722675ae7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ], "bom-ref": "urn:uuid:492de515-34f1-507c-81d5-7ec58f466583", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.11 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@5.3.30-tuxcare.11" } ] }