{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:30bf3074-e5b3-5251-9bb6-023e3fe58c26", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-beans", "version": "6.1.21-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bd636a67-6b65-5cd2-923e-a9e6bb6c9ee7", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-beans. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5b1d34f4-93a9-52b6-8aba-6502a606649f", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bda2c7a7-1538-5cc8-a097-9bc70d547cc4", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7fea5910-e0de-58b4-a5a8-f0229d6e2108", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ad448de3-c68c-56f1-9a56-c70bf530b961", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:643632bb-c1d6-5145-a28e-f6e36a1df985", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6d78c5e2-5227-5d4d-873c-311d010aa66e", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:aafe7fd4-a060-596f-bf5b-3ce5e122aabe", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6a810892-2a4b-515b-92ee-ac74d4e19018", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6f90ccd3-dd81-57e3-92ee-67750306fba3", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c22e47e2-6042-52e3-b9d7-52781b5e4dd7", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1e8604d8-495f-521c-a322-1bb0a93ecbbf", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f38786eb-829e-5015-8735-6547c110b23e", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:491e8b9f-608f-52c4-b4d8-a052764723f0", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c180c157-cd66-553f-94f9-d8671df99f97", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4b10b44b-54da-5086-93b0-a429d672ee1e", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4abeb1e1-af4e-5c9e-a48b-2ef5c06ba383", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d656bdc5-0bd6-5d95-a734-0249b4e42d2c", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5bb67fe7-b039-5a7f-9c40-03e12664e386", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:90342850-ec26-5555-8e47-3f5f0dda1607", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:46747310-1a2e-591a-8373-e276d5853d0e", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:10139393-5cba-5255-9462-574347785110", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1a863dc8-e761-5bc4-8fcb-eeadef9270c1", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1491b56e-205d-5e79-b71d-43733cf250d5", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b6a77d46-9a91-5bfa-b6e6-d3fd7084599b", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:270c704c-7e01-5a31-a795-759d86dc2cc4", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d9d2c6ca-d2f0-51e8-98c9-2124775de385", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2a09ed97-8fa6-5387-b2d1-c26bd8983d81", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e37ba7c4-cdf4-5b86-b373-b8f5186e915e", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7b9ee5a0-dd67-5522-8a4c-dc089777ed30", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2458e0c3-d09e-5a28-a273-8d09989f73c8", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7881e9a6-a03a-5821-b912-aa338d66fb49", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e0b06e40-3c1f-5cbe-900b-78c7f5fb9387", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:104c3d50-0457-583c-8916-593fed41d279", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8fcf14d7-9346-5d1f-a39d-f46824eeab26", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ccf2e477-cd75-5603-959b-ba0c85926ab2", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:728058d1-3b22-59dd-a86c-bf8723590a9d", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c737f9df-7d13-5526-8f77-067c5e6e2353", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:dd0d0b08-aa74-5fed-ba03-18e8fba278e7", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-beans." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.21-tuxcare.12" } ] }