{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:881ae32c-fe62-55c9-ac07-74e3d6e4e3f0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-orm", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6035d8dd-3ff7-5c5d-bbb7-c3b0988d375a", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-orm. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2541c31c-5f4e-5758-8037-0c1c300cf0fe", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:750f2dc0-46e4-5618-a522-1b9e50659d07", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:923cfe65-d896-5f55-bd91-0d7e28e20f54", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:20dee292-b00d-5a91-be15-b253baffc12f", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ef221945-175e-57e2-8625-0fba5460c968", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6ae71f73-ee64-5c1a-a90f-86958f958427", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8d8a58be-44c9-5f3e-8e6a-177940306dda", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:23fa7b03-7575-574e-bc34-1bfe37b0d308", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b0190087-aace-5dca-9293-71eb3cc0af5c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5b1c855c-7576-541f-ba4a-ac4301edc601", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:800bb21b-c4b6-5c80-8a57-5dbc5fb384ac", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:802accc9-8c3e-5fab-9a2e-c19908563402", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:16dc5982-e3da-5167-9772-5b9d7798764a", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:14ac9cb3-a8cd-50a9-a77b-bf89724b36ba", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e944427b-fd48-5cd4-8b60-49131dccd610", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:49b967e2-a3b1-5c2a-a2d6-9ebe12b8b20c", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cb4e56d5-5624-5fac-b04c-37b1a79756db", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:914ce375-063d-5bf0-a302-b9313aee19e6", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:920cb291-f8f9-582a-ab69-b13545b5e905", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b646a943-7d16-5dad-8056-22c990a6df45", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:85d45db8-6af9-5df0-8127-387e31799855", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:495ff070-284a-5389-af06-e95bf2b0a6f2", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2ae346fb-a546-5b73-923c-becb349c57c9", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8d01a959-e266-5ce8-9990-6c2cf857c6a8", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ab4dbe26-e969-5a10-8a42-34dab47505c1", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cf71a74e-7512-5eee-aa89-96be79029013", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d0522970-fca2-5ec8-bd80-b7958766da5c", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cc51b2be-df61-5fbb-ac33-e88b2c085d2c", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:42be9299-f857-5fd3-a0c2-3675229ca584", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4c8e48fa-6d5b-550f-ba44-7ef2443e067c", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a8ed9b61-3cd5-5da5-b522-c3b8f4fefd2c", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:eeed051b-4f8b-5cae-9b52-f9bc445a98e0", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9873dc1e-535a-52b5-adc6-2cac30789f0e", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2b8a9dce-cfd3-553e-a843-eb0d40c51636", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:49ba03d8-0ecc-5005-8c21-5a6514f3b5c2", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:42586c98-a220-5b2b-8d41-729ce03ffdc4", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f75dad13-b0fe-585f-9e4c-2c46a66f4360", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:07d16027-4a57-5bba-af81-033f0b72de3a", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b21edd1e-459c-5694-a0b8-77910cf08498", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.10" } ] }