{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7c753078-828b-552d-9a9f-044571dc3e25", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:11e00137-4151-5e75-86e5-5cf49ea154cf", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-tx. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:caa5320e-65a9-5f14-ad0e-76947cadbc70", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9e2cf1ca-6bbb-577a-997d-baa7b08ef092", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1467cac3-4fd8-59cd-a35d-a4b18c0735f4", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:893ce670-bac3-5c1e-9721-804f3c374c6b", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c5aed619-ee3d-5b8b-9286-3d7a9a37a23c", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1d968519-0788-546d-bc3f-1fc7cf4c448e", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:092933f9-8717-5f32-a812-acbf1c1b60da", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:20c1a389-28ef-5f15-a35b-5c675fe03c37", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:41962e90-7a66-59dd-8950-99bad174e021", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:714c8811-f074-5905-8e26-548329af0629", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0a84c39a-8ae2-55f8-8ab6-32e63937453c", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9c360e12-66ec-5354-b84f-b6dad901190c", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7984c8b8-8cea-57c7-a69e-6f11389d40c2", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:487271a3-25e6-58df-9309-da93c4cffe3c", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7d613cb5-95f7-5939-9391-f4ce0298cdc1", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:90da17ad-809e-59fd-ba60-addd17a40fd8", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:edc1c043-181a-5acc-8291-fd7f8948c3e9", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0220f728-ced0-5e09-9d47-e514490f8bcb", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:45103835-3b7d-5c5f-8f0b-c1875944f359", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b4f59a30-2c84-58a9-a771-1d9779fe8e3b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:40e05a57-acab-5132-929a-17d6bfb0dc2a", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4d3ad813-8175-525a-988b-887381009e5a", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:25b42208-dd2c-5590-b536-0c762e874521", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8d9a189a-5c3f-531f-8532-503e4abfaf86", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e2e6b5a2-9437-52c1-86fa-821b8eee4311", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:15d56d89-2032-5320-86d5-0e3675f9d8a5", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c58b98bb-712f-503d-95aa-24fc7dbe8cd3", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:51393469-6fad-5117-a737-db0c62a1a0be", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8b48089f-764f-5538-b52b-20b55b1c01c6", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:93c45efe-5dfa-50d7-8be5-3c131eeef23a", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7a637448-bb38-539a-924a-7eec0894fcb1", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:972b3e54-08bd-5a2f-8e98-f825a7053e6c", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8be3335c-2eb4-5313-9e32-e7e7cca5de69", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d211ca45-6314-53ef-a1ca-a91b6c5eaff5", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ecfeb6da-2dac-5ae3-9947-b01058a37303", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:24997d4c-6f78-541b-8dda-15157a9bd3a1", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8cabc28f-4885-53c9-8e2f-a8bcb8f5e597", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:36c9c5d9-886e-592e-a1a0-1a000373c223", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e6b9b6f8-6a3a-5a9c-b26d-ac096c75dcd9", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.10" } ] }