{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f7a927c8-aa24-5471-b9de-dcba1f09988a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:73474062-5eb5-5afd-8e5b-e157de971acf", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-oxm. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f95ea268-91ea-5a5a-8b7d-3fc15adbfdb9", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2472abff-16e5-5465-817c-586a31fcc66e", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:263c8c31-8a85-5dd1-9bb1-956cb5418a70", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7d8fd523-19c5-59fa-b66a-8d3c42da5c1f", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1dc4d31a-c5c3-57c7-8935-4d9dec29817b", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a717836a-ea08-5847-aabf-3eae0970e624", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:402012b6-8a1e-5e11-abe8-d143b4bc86e1", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:880e8785-5a16-50a3-9202-b7437c17057f", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:adb6866a-bb08-5079-939e-b25145751f5a", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b38fdc3a-c617-5aaf-88e2-d51b6f177210", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a3997431-73d2-57e7-b052-79a9062fe96a", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:778afd7c-123c-5896-b10e-3afc27fcc798", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:19ee8146-2d99-5238-9765-99a9a215c8a9", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0c8c16bb-df66-562a-85a8-e6c1608f4958", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:daeec515-374c-51d3-8541-f118cc91a75d", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f8611e9a-b9a6-5909-9a98-a7c8b7a88702", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9af3757a-2046-5579-a742-045dccb630e8", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:25fef00c-eb9a-5880-b183-3fbf1bfb03f0", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:497bff29-5bcf-5bc1-9a3b-41e07d56ee6e", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d40e6372-4aee-51f8-9890-e9460761710f", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:46a73f64-8974-57f2-898a-9c5a1829391f", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:daeb32dd-20e8-5ad1-b085-943c80a59ff0", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f9d247e0-2277-5bdc-9166-5d702184721a", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:54bcd15f-fa47-5034-be22-855c6dfcff67", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7c5cb78e-f25e-5231-b67c-465ebab93355", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d0ff6f86-aa43-5e6f-9a62-d8c23a6c5f7f", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7d7aef54-6ee6-5dcd-aba4-27160bb2eb17", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d56c121e-30dd-5827-a198-af5633b4a4dd", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:24f892f3-65ef-5622-8bc0-1a5e51c06e88", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c70b75f0-3601-5f23-a172-03c7395769b7", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:54f533ed-9ce3-5f0a-a4f4-5f0693566ded", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:35cce10d-c173-5c87-aff9-3bc1253f5967", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:80899a09-0405-5d86-a194-54cc4589fd50", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f2e4be64-a203-586d-98db-dde3c0a14c6b", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d05c1965-edb5-5bb5-9cf0-a0a51bbef3e7", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fba1fde4-bee9-5719-9b16-319035fdadd1", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c097bdf6-99af-5ec4-8642-78759bfaf394", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a107a07b-0c9c-50a5-af38-b3cba402719a", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c0ef8517-5352-5967-828c-f59c8bf0a4f1", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.10" } ] }