{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4cf5136d-d9f3-5d1b-823c-a7dd2277e764", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-orm", "version": "6.1.21-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:8fc8a331-8e5f-50c6-bd60-91903092f059", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-orm. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2a7d4748-90b4-5c1e-92da-2f0a0437f10b", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6349a0b2-0aa0-5e4a-939f-5e72c4342469", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0faa65ca-c7dd-5380-9365-54376470b122", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4ccc397d-be9a-5d14-bd84-bd4ff7eb32c9", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2d4d4d70-0fba-5038-a2e9-07ea433a2c1a", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:99ebc89e-86a3-53cf-8d72-9f2695c9ee4f", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:71552863-15f0-5c20-958f-7f1764f79688", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:a868d3b7-3bc4-5b30-8497-7aa5d7289100", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8cc7d787-24e1-5e94-8059-2508473d1b4a", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2713e830-1b2d-5730-a378-0b5e2eb1b285", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bc79912c-e46e-5513-9b9f-bfb7bbc81bee", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f204d774-3041-5ff7-a421-cf8e60023a64", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:724fada8-2d95-59d3-96bd-27992c8405e2", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:97c10be3-855d-5f34-a224-a5da8270f045", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ae5dc6ad-bfd4-5ced-a46b-0e108015525b", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:08afb68e-2a76-5705-9c45-b532f2692ab3", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5492a28d-1962-5073-8aeb-a4f339c277c2", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0f525ab8-71f6-5a65-82f0-3c3ef38749ee", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:95bad645-e34c-53c9-a717-4b5666dc153f", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:787b8e41-fe03-5d1e-b8c0-59ad94ecb0dc", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c819dd2e-74e7-5907-9f7b-fa1f5259baa7", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:087a8522-ea34-58b2-908f-699bd2558fed", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3639ae49-5f89-5290-97cd-cc2947a6b9b0", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:af44c225-58d3-59ea-8355-f0179627aa43", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3ed25f08-d4b6-53bd-94bc-55a060648f25", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e3c95fc8-562d-5b7b-aebf-be1d30eefd40", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d6bf0822-5bdb-59c0-8556-39a0c64a1ecd", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:de8deed7-1a50-5d8a-95e4-006e7f2c09f8", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:07659c88-be85-5ce2-bd57-e7a856b54bfa", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b8db2c36-f9c9-58b7-accf-513540788ac2", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:db557da9-562a-5922-bf12-270ac3695d26", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c8d042ec-6828-5e60-abc5-b14a4a078f3e", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4f4ba2e6-7f84-5f1e-923a-9cb60b65db08", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e800df59-2bce-5e51-acf8-bbc11d8a7ca4", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5500b78a-56e9-53a5-828b-056744d529fc", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d011f96d-a550-5c78-9768-7ca5200abee4", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4617a031-ceaa-560e-8116-15d4cf4a276d", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:38a5f6e0-4c09-59e5-96e9-d3e2dd7cbdbf", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.21-tuxcare.12" } ] }