{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:adfd4946-35b6-5554-8967-9bc91a237c4b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ebcc251d-a2d9-56ca-b018-2062d231021c", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-beans. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a277f205-7e88-51f1-bb89-9ab4660f636a", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:830a7ac8-4c3b-552f-8a48-21a4517467ff", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1984b0c2-6bc6-51fa-ac3f-b3de2192d199", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9aed40cb-c4e7-5e52-a08c-8878bbf79d23", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e52940a6-a959-56b0-a502-6ca45d44efeb", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3fa36109-e2cd-53e7-8d9a-4c45a51bc96e", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1cb0b1ef-7dcc-5839-9907-b2a73d32979d", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0f7da85d-96b7-5abc-a5b4-37f87fa6bd3c", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:69214716-d3fb-5191-9877-f80276fc15ca", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f2c42cf7-ec02-595a-ab06-eb73557481ec", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d769a1d9-2393-5c24-84fe-f8e5451c3fad", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0af1d3fd-213e-5039-b9e8-814c5c9ac683", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:485038ef-a408-57a2-830a-c58153d79922", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a3a6ca25-2b7e-5b7b-b4f8-c351e571f5b6", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9c9104df-89ea-5c67-b85a-35853d45624b", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:36ac47c4-0a21-5cfa-9b5f-31e04a19ebd2", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6c8fe825-1316-596b-b690-c72047d0ed2e", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:de61f2eb-18a6-5ea4-bbf0-2c47d5701f5a", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bcb79f38-29cb-5e45-9705-aa00c5e1b9bc", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:85923474-b45c-5dfd-883a-363ad641995b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a75addde-f057-57c6-a8f6-c83b4fb969a3", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8ce5d154-084a-5506-905e-232e79b9235d", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:97b56d8a-85cc-52c3-93ca-93c7b8b898b4", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b317a230-a972-50d1-8451-061fe386d3b5", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0db62004-6b72-513d-b3a9-057e33a20c1f", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4bc560c3-88a1-5f51-bfd3-3b658e80ca8c", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a2e4bd27-291d-5266-ab83-1422611351c4", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f0982a00-1cdc-54fa-8f13-8f05652ea969", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:edfad810-7d06-5a71-8bca-8850d35da572", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6666ace7-387b-5579-ad2b-a69e24154711", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7b5ad05f-7fb5-5303-bccb-8aaa703d1953", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2f9288a4-a4e0-59d7-ac60-4f80a4675bc0", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:989377f3-6399-5505-ab6e-79aeda8da13f", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:904fd427-71ee-5d74-ae72-819bb25f5cd5", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:88efa03f-1baa-5229-91d0-8600b1ae2bb5", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:73c00367-9551-552a-83c8-9fb6fa86a6d9", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:012804ec-25a7-54a3-a754-ac7560fac691", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:beb8464d-4b3e-5755-9ce8-ab27db61fb29", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4f037185-ad6a-588f-bb83-13940530ad1d", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.10" } ] }