{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:be6f82de-9e48-5244-81ca-ddd1bdd9290e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-web", "version": "6.1.21-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c8607dec-1311-58ee-aaff-bb29e6a99f6c", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-web. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9ac7bb22-eb06-558f-82f9-f97d21a3e544", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2023db90-0650-5171-9433-6e9e2312a551", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f46d89a6-4935-5f0a-be6f-625a945089bd", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5778a160-4fd6-5835-b0da-5f8ee7ec8db4", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:dce02fa3-5546-53e3-8875-61cceb266d9c", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:4754a96b-2da4-5d74-a14d-877db376d641", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0b321ec8-8f2e-52df-9f9b-aca1c72a341e", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8a4d25f5-6147-51ce-b455-ea5445a90981", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:05462145-c014-5df9-b57c-114860057d74", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f8769c4f-fc3b-50ef-b2b4-3025a5657d3d", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c60dee40-6e26-5ac4-b4a1-769783007df3", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:52c23ad7-20fa-5ab7-b8d1-9fe4029aefd1", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:37b991a4-1cad-54e2-97f0-eef09b0ead1a", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0e716f38-c468-5622-88e1-8eb0efb67ab9", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c8989ed2-a23f-5506-82d5-7cb475e3f61e", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c380c8f8-cc56-521f-a355-aead52ecf8ba", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d5f82c8f-7086-57f3-b158-e45653145e76", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:113720b9-2521-5e17-a63a-88d5467687f6", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:fe9a5bc1-3e58-5615-82c9-1ebd368d12a8", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:01f6cbc1-a434-5c1d-953d-4d2fde0d9b46", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c2a0ebd4-27e4-57e3-b3df-53ec1959cda8", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b7cd2796-291f-5e32-b5b2-c0c9598b42e3", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:99728a6c-0218-5e9f-8dc2-5c45c92ba40f", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:171e1f62-4cc4-5a12-a1aa-78ec3fda69ca", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:70e54bb3-3340-5de6-ad0b-6e28ac67d5f8", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:76b4f9d6-6208-5eb2-ac53-26c0e152fa0a", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:cf550975-4840-5008-b747-d77cae725d28", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:a333cbde-6c78-58fa-b3aa-c976985b9c90", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:023ff618-75ef-5df6-8f61-75614b12f245", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:185ef216-1953-5d84-ae04-ba637988d3f9", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0270befa-30fb-53e7-b8e7-f0890f9af3c6", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1a4d3511-0018-5234-9b1c-de91807359ac", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:34198b80-87be-5c8e-9c10-d81ed7fe0549", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bb54780d-141e-509d-80c4-8d780dfa1f64", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:80272b43-9a18-5ea6-af3e-1dc0279a0f00", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5f7c2c1e-5115-5bdb-ad9c-3ca58e9c5f66", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d6894999-054c-5f38-b402-3ab43fa18cfe", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:861fc6ab-e7e0-5d44-b241-ed1e328ca847", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.12" } ] }