{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fb2098a7-0727-541c-bc39-d22056d25eaa", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-r2dbc", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c5370e1d-21fa-5c81-9c37-e3916daf4630", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9b4a51a8-0197-5d63-9293-1f31612f816b", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5e6fbb85-48e7-5a30-9e96-aafe6ee048d6", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8805ac15-ac37-5f4b-ad47-e545993b483a", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f71adb3a-e99b-5c60-bb22-b9b9ee3fbe75", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f7dd3a6a-51ca-5e64-9eda-da5958f89e6a", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9d504676-af80-5b50-b7fa-ebf4ea6b202a", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9e8f174e-acaa-5a4e-8ede-532e9bb48782", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:efd13a35-5022-59e6-bcb4-a287326687f0", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b9ceac08-e909-530e-975c-57d9807a0f63", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:11ad0d5c-c47a-5fd2-9334-fc2d626a0857", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:da4f93e9-9b82-513f-b5d4-755bc2d20aa3", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bea0fedd-6d4c-51a2-b224-0d79dcdecc00", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:afee1673-949d-588f-8772-a17a12702ca5", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0697b579-acc0-5930-bfaf-d483ca70e6b0", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d7984d15-427b-5e8f-b1e0-34419a5f077e", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:aab143a6-0c2d-57e8-837b-50d88efbd74e", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7d338e71-cfd9-557e-83d2-806ff3fe4aa7", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0c8ea2da-c40e-5d92-b211-450d12cc3fed", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:da1eb211-e14f-52d4-96ad-cc30ab4427e2", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a4c4ac82-02ad-55cc-ae81-e546759e62b0", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:68a3dc52-cc0d-5a70-87cd-b760baf24e47", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a00c89b6-4487-562d-88a6-5448ad525cb3", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b0156dac-5a96-5420-88e0-bb5bf02e9433", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c9093d4d-b6d6-59fb-a5dc-3f9977d24aae", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f3c2f154-2bfe-57b0-8088-3511184fd759", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2d5e8f6b-3ac4-597b-8e00-62fce4f8d0b1", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f1dffc6e-da81-54c0-a5e9-f072e1827b45", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:dd47e909-62f8-5d9d-9780-4717cd3de269", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:09fb8ed4-73aa-501c-b10f-4ec4306b7540", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4bfa21ea-3bdb-5e16-b0eb-93f3efe62d86", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6354e6de-3d00-5f79-947f-2e68ebb5fe56", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:068ac6e4-12bb-5e15-94ce-add552c3b0e4", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:038184ba-ffc1-5c44-a8db-15ddd20bd028", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6be4e361-f262-5168-a0f7-201c934cbaf2", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0af5a760-0257-5136-9c7f-a2d76835a6e1", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a8f2df74-0921-566e-8955-61eac624a48d", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:377358e8-1ae9-5221-8a62-f95e7b2bd8e4", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:effacc6a-c7ae-5b21-9955-a3609d1f699d", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:38fb0b34-8f9c-5fc4-bc75-f37cc099ba14", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.10" } ] }