{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9c25b3e5-e466-55c9-ad44-f58e86df05c0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "6.1.21-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:de01ced4-57f3-58ce-a30b-dba87ebe78fc", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-tx. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bd21d1ff-617b-5d32-8c2b-562ca60b9ef0", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bb8a2eb2-b3a3-5b7c-bb88-7698216f771c", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d7afdc20-2722-56a8-bd9a-6a41b8a1f964", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6afb71d7-2d54-50a9-ac6b-5c1b4305ad2d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:cd7160c8-8a1b-5c0d-8995-dfc513e44cf2", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c00a0d0e-0e89-5695-b493-279257231e39", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8de664e0-1fa7-54a3-a49e-183b8dc40604", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b66444a7-007b-572f-9f87-d65c6460e41c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:38b43bd1-e8d2-5d08-96c5-aeccfc8ecfb9", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:38c4cec9-0d14-5193-9541-559ce66f28d8", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5bb0a4a4-0742-57e5-9737-391d16751266", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6f4ca469-1837-5c63-a2c0-4845d3dd0219", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:570d7a89-62bb-52d4-b976-99104c2036dc", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f9ab3630-6c25-50fa-984f-adf117c6b021", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2c0d26ba-cf6c-5e10-9cfd-e725ba4058e2", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7b03b7e9-f266-5845-abfb-33dc336bd9c1", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2043c457-6181-5935-9b37-b787dc2b0d66", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:65515212-1db0-5af4-8c23-ee7562bae2dc", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5426371b-33a1-5146-bb5f-290d6d2cfe3c", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f9aac8b4-5f91-5fed-9c80-11802b2b985b", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c107a6de-4dd3-5eb7-a0d6-875d2415e783", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4eeaa81a-4fd6-57f0-b176-6ee710378b6e", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ea7fa69b-125c-5b48-a9e2-bfa239ae573d", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b3f3b250-c18a-5ac7-8115-bbf742c187ba", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e006688d-3cfa-5a63-815d-844ad6909786", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5eac97b1-f228-53e7-9293-8b1a0db73871", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:12c66bad-be5d-59ba-b736-fcc55b1242f0", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d747395f-737e-564e-adc0-5d56e526e39a", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3bb28566-46d6-5e40-8e89-4c2760dc1734", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bfb86ade-182f-5aef-9a0c-eb34028a9586", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c4a4407d-f5b7-54a6-8dd6-e6c4a5633997", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3c90f30f-eaec-5e47-8ac2-7614d05adf2e", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:edbe9736-2fe6-5dd6-a914-3f551e048bea", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ceef7f38-44ce-5005-9712-9b2eabacf009", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:85201a2a-2ad6-55e2-9352-e4bf3cc05007", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0098d575-f7fa-57e3-bb25-9e5485dcc081", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:529a0f7b-99fd-5648-bb44-a4666dc32217", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:84981c0a-c026-51b8-add9-79ce0e2f06b3", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.12" } ] }