{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:97419acc-dec1-5737-b829-598ad3e5af09", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-jdbc", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:631b4081-d6b7-5223-8ca1-730e01b7da63", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:371b41c7-9fde-5e6c-bba0-383ccca96527", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7563b887-7d50-5409-aff0-008a84e3ad93", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bef71555-f5b4-5c4d-a5fe-8f986dee7d33", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:25c9cfc6-dbd4-58ea-a49e-205f1093635b", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:22f868bc-3849-5f62-bfaf-f30722d1f415", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5b4e0e4d-3fa3-56a7-8af6-9181593038ba", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f85b92da-6bf3-5126-96be-385eb5416c7e", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ec850a72-f98d-59ef-85f0-deb070f4d9da", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:44f98de0-69e5-5fb9-b85c-dc553bdcd16f", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b9a0763a-ad85-592b-8dd2-43a1831116f2", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:629b3567-ad3f-58fc-b2f5-246728fed758", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:70a7cb25-fc9c-570d-9b66-c947a924c499", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a27f25cd-2425-5f50-8fd3-af27effa5f04", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f48629e7-74e9-5c92-b4b6-8713a4c49a16", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9175ecbc-bf27-54fb-8ad9-789b52bac05d", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4b26bec8-55ce-5c44-9f6e-62095dae2caf", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:147153eb-9e44-59e5-8299-86616ed69003", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:477ff1c4-8e20-535c-89f4-381569f3fc38", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e834abf4-41ed-573c-9ada-da3c938e0154", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3ff3fdaa-77d2-5636-91f8-c8a813514ebd", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:384f0ef5-511a-5395-9e47-95306f42e1bc", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6e080e6d-f811-51fd-bcbb-2edcfcca34b9", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:dd3ad7be-ac09-5b54-9c47-3b299d6018e4", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0c843285-2c6e-5a8d-835a-858d0dc53f34", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0984749b-1065-515a-86d8-b98157f6d45b", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:32c0ea7a-b076-5cfa-9aa2-f9760f4b591a", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3ec2ecd2-f564-555b-b571-60e706fa4a9c", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ade846b4-8b95-5f3e-bb9a-809af770159a", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ff6ab7d6-1759-57dd-a1db-6a82221e243b", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:81954ad2-ce7f-56ef-88c7-9738d954d724", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:64ac5548-9289-5cf3-b869-d733c2c5284d", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:33fa5e17-6e7a-5556-b866-8fc9fae304f5", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b8c63139-2fb7-5ebf-bf84-54689c1f0587", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c858b75e-3f73-5f2c-afb4-0dec2626199f", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a86aed50-3f8e-5b1f-a341-32de3f06b145", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fd4fdad6-9ffc-52d2-90a3-35c821aa714c", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:004ee54c-9899-58cc-a508-938943aa97ed", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0b6c27e3-40b4-59eb-89ad-c5995f7da535", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:66063dd6-0abd-52b6-b082-f04cee6496ab", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-jdbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.10" } ] }