{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:354004e3-4a46-5047-b519-491db1bb9d3a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "5.3.30-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:07e507b7-4143-5ecc-b9d6-c4fefc6b3817", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dd3eaef8-69a6-50fe-bf7e-8cb1c18a636d", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d0342240-6dcc-5774-b547-bf2ffa0e8e66", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:79933231-ed0e-527f-ae21-b2797f5e1996", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b67e2ab5-af1c-55b0-b770-bd4da8485c23", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:66e13408-0ab9-5051-b49e-069303ce1a36", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:106f1767-b2c4-543c-bb98-473af4fe1fbe", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bb315b6a-f7fb-5151-8bf2-807fb6a9211f", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8e36d109-f530-5b6d-a64b-90b1533b033a", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a27762de-55ce-52de-9123-b7b1c049f79a", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b5cf4a70-b02e-5ff8-b265-3892a4f7c847", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e7c5699c-6ebf-5fb7-be94-e9a084edc85d", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8e0ae6e0-9936-5f1a-ac8c-3f9ea38dd650", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:72c171b7-c28b-5912-96a3-1b1dda7ad410", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:34021dac-c9b1-5e6a-9755-217d817e8043", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f2e6b798-cbd9-5f46-99bc-37687ff591a1", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b7d0f8b0-653c-5bbb-a0ee-2f1591b81244", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:541082cf-b0f5-5ae7-9e1d-b44bcd2d5f00", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c2ebf6c9-ca8d-5970-af69-24f3f2ea283d", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a1253b2e-aa18-5500-b657-1e4c2a0b63d6", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:33239d0e-4ebd-58c7-a950-83cd3add3bcc", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e42e421d-c07d-51ea-b8e9-8bf5f1c497c2", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.7 of org.springframework:spring-tx. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:eb85e556-a1fe-568b-9555-cf9dade6557f", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ac256d9c-e5e9-59ed-932c-367eff2a4dbf", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:17fd6919-82f7-5f38-95ff-d00517410ca8", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d9117e54-df25-54a7-94f7-3174582b0388", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:be8ff025-a45b-51a3-b95f-5b98d413dc29", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:febde138-6195-5293-940c-0ce3da4950aa", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a3cd5bfb-b8a7-5b67-b3d1-db1f77af6843", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:48ce461f-a52f-58ba-ab4e-f612ba605da3", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5d199d15-7165-57ba-beb0-56ece8d81dfc", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cb26401b-07a7-578c-90a4-7b868f781e6b", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0e3f68c1-c932-5a49-9470-c73459563dd1", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e50b5ef2-3336-5659-bb06-b70a779464ec", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8b5bc892-b1bf-5f0b-997b-08282757a25d", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:46b32d3b-2144-566d-8b6a-ad57071c8107", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:81506106-412f-5db9-9ecd-6bc6a67d75eb", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a787cc9d-5a9a-5de5-9a8f-c5af753813cb", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cf84bfad-ce80-52ea-a8fa-fd2534711dc8", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0e5fa94e-a1ad-54f7-9c87-b98bd253cc9f", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c83d579f-9481-5580-9287-2ea38d9b6f91", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:94854a92-556a-5fb6-8e9f-060a109305ad", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3b006c29-7cbf-5a6a-9448-fd7609b03f04", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:044cffd9-c960-59ff-b94f-283feba6c7db", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2d0e1eaf-babc-52bc-a99c-aa89677a7712", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3cf19760-977c-5a21-8e3a-363055f85f54", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0e69a3af-4ec4-53c6-9200-40b21fa2f50f", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f173d81e-46eb-52a4-9804-122cd6ca8ce6", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ee94fecb-215e-542c-9085-b8aaad983e8e", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c7ce4c1d-1d91-5747-93ed-18c87c6f6d5c", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.7 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@5.3.30-tuxcare.7" } ] }