{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e51a8410-d0f4-5ccd-9060-13995a1823e8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ef59bd5f-90ec-55ce-9a9a-35fe2a13cf99", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-jcl. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e7794949-ab52-5eb3-9621-f283bf2b2796", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bdd1b01a-5f52-5baf-9a0d-40608a0515a8", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:335927d0-a925-5208-9932-a2bba1571a73", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ebdd72b3-7a34-5fca-8e49-5a3e88e3715e", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b7412c82-763b-59c6-a129-6933eb1b5461", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:51f82256-97c6-5300-b8a2-de12f5f05dcc", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0f76aa24-7913-503b-bf4a-4eafa361051b", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:41b408a7-09f6-54fb-b0da-fa907585d60a", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9c01f3c0-4e95-5233-9bcf-bde40f0411e9", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5512c153-b649-5575-8dd1-9d15188a7b77", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bf2ed016-509f-5bc9-9502-b6690ac8ad9f", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2df41f73-390a-5780-a9bd-447e17634ade", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:851aca2a-50af-5602-8044-aaa35664b0a0", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:deb8cbbc-a0bc-5713-a88d-128c3d5ce882", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:28217a4c-82f4-507b-ac35-ea681012a71a", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bb01b1a2-6019-5452-a89a-35dc65efdf7c", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:053b7427-ec59-5c74-8126-e7fdfc1c7714", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3c9e306a-37a3-5dfc-a657-6f677bf7218c", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f8799e29-7b51-5179-8073-17b213fb2ab1", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cf4ca0df-9b86-5f7e-b562-3935fddb17c8", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7e8698fa-f247-551e-b14c-dd9d19da179c", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:41f585f2-8b98-5f5e-bf60-38efdcd41f07", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bfd8f29b-9890-5645-8654-4465ebe53480", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3dae5460-2155-53bc-b48d-483888e1ea8a", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f4d5ce56-df3d-5c5d-8bba-1e6544e4cf4e", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8a160a2a-944a-5822-b779-019b98239147", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5c5d8ff1-3fa0-51a4-8aaf-ed712c6328ad", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:38a0d0b8-2b36-5c21-b1db-35716bedc93f", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:77472cae-f24f-5426-bbed-f8f1d0228576", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6619d3e6-03f2-51db-a779-eb2a83a9b687", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6c3cf8c4-22b4-5a98-b9a6-ef48b3272900", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5a024066-3c02-5af2-95a2-8ea11d60603e", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cfa130e8-f10b-5560-a3e4-0202e09ca547", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1550c2fc-2f6c-5bf8-a598-85c2a2015386", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:333af7da-0cf9-52ae-b40a-30d005a019b4", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:83ce4f2a-bb31-506c-ad13-8c4ff1adff51", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4b07283f-4647-5e5c-ac75-c93087c675cc", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:99ba96fa-06c4-5a9d-9ab3-32007f02881a", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:686efe68-185e-5013-9e60-13a8cb13b796", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.10" } ] }