{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:05982936-05d3-5de0-a754-91a0d98c1ab3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-context", "version": "6.1.21-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c7ca48bf-12eb-513a-b8a1-0975a857fdbd", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-context. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ff4ab0b2-4d3b-5039-834b-3b8ff717a1f1", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e783bec0-8555-5473-bb40-3d936b41a10e", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7a19e968-f9d0-5737-95c0-81171c5250a1", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:742fddd1-2da7-5b75-9f49-7f1d5fa65a29", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:360a1fbb-da0e-5311-855b-56015df58eb0", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8f8a84ea-73cf-5c1d-a5b6-d1d08cc52f2a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:036bfaaf-e94a-53b8-ad06-3c20b9033c57", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7724aba3-18a6-59b4-a2cd-92e085bb1682", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:334a2d91-553f-56c0-b269-4bb1112f7ee1", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:cb6dea2e-0436-5ae3-9dd5-dd2c0c56f04e", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2f1cac93-3393-5fee-a236-314d12a3ad15", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:02ada389-30a7-5cf3-8243-3691468e3cd5", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2fecc212-0a5a-55ff-bd5c-2c3b75467c10", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1fe3ef85-95c0-58aa-b409-fc6d62c90218", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:cc74e6d2-7df9-550c-9b40-510a384f2905", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4d48c2c8-f73e-5c6c-84f4-e7d46e5e398a", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f7e7a131-d40b-5ce3-8882-b9809624b863", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:71845d4c-c93f-5fad-9b39-d8461146b7e4", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d7481a44-d1c7-5e83-9667-9c5bf0cd3fff", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:99824620-d552-590e-a37d-7176365e57d6", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:cf1c12c7-2fae-5fa0-8db7-ba26e28d9ab5", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0cacca65-2bc7-54b6-8ff4-fa1cd48a0c7c", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8e2395cf-ed1a-51ee-967e-92bc02bcc1b8", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d1cc31c8-02be-5240-8dcf-711b82ded846", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:08c2e5b8-8553-53fa-b451-3984f7e78f3d", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b733f3b8-6c33-58a9-a80c-e79e53059185", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2ca31b0a-3337-5676-b70c-6f6b7750455d", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ae6e8be3-49a0-5841-97ff-fa4fa48f8480", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d037ad07-32c0-5b8a-8963-43fd89f1b9fe", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c8f20105-c021-58c5-afca-5309644e3e21", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:36cc4674-343c-5e59-b5bc-17756d5624e0", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:fc28de64-b763-5731-87d2-63da60a64f2d", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:28706a9b-32d6-59d6-bc18-7337b1ac6519", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7d31599f-ea50-5a22-bb6a-5237819edbd2", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ab2dee9b-4af1-569a-8c18-f6b4d97bf49e", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:77dface9-f35a-5ae4-a676-a0ce69230575", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:25ecdfb6-da85-5d6d-bf93-87f53f8ea6a8", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1eb7ea89-6f66-5bf6-b016-d921081fcf95", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.21-tuxcare.12" } ] }