{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1d9e1f2e-38d9-5090-a8f1-b15025721df0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1f8b60bd-45f5-552f-836c-17f3aa35adbb", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-webflux. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:06c33ed1-b3b6-5393-9e32-343d16123574", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:88d3afc8-916a-5620-97d8-5c2ad908c919", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0d44d95a-7615-5fea-93af-4a064a66a853", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9028cd46-7dd0-5987-b42a-3cd836f64b7c", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4ad33933-361d-53ac-85e3-78e39e360271", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:53c769dc-777c-53a2-9f46-0d5feee49ae5", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5e9f85ad-cfce-5ccd-8431-0f878e52cff9", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:11c5ead9-c3e3-55cb-8d0b-c0ae852588f5", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e3c2bd78-db7c-5f84-b01f-42513ce00319", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0e684da0-d992-5f55-b044-4fbb86c5238f", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e5193d9f-9e6c-501f-afb5-e71e8fa0b561", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3ecc6357-8781-5fd1-b301-1ca25e942858", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:eadfd1f9-c467-5e2f-9888-fc1c87a29c4f", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cdf001e0-d5f2-5f6c-8bb2-b918ffefb0bf", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a3255888-fd25-55bd-9656-75dc8b88c3bd", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fa6d3c47-cc51-56bc-9921-5b3dc13a0edd", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:1339d88b-e95c-5b1a-baed-1af47c0a1e3d", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9519451c-a4ab-523a-9328-de2f904c02bb", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:041c0c11-46ca-5cc0-8ec8-3ec4e971595d", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e09726d3-4108-5445-930b-70c924cacccb", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bb32a081-efba-50b4-86ff-3ef4f66581ce", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:db219212-4e57-5f75-b10b-c5087e06caec", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:81ea2390-91ab-5148-888d-8561f055b676", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0246d9ae-c75c-5478-8912-69fbee11938d", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6b96c6d2-6194-5425-89ba-43d247e24820", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e06eb92a-3230-5a44-8074-a19d49386b76", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bbc334b6-119c-5f92-a945-aed4e5eb27a4", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b7447bf8-b657-5a3d-9031-0737fa4ce1d3", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:69ee6773-9f1d-5b71-acf1-a3c9d50bb592", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:48092965-85b1-5226-ae45-a3a49cccd135", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:39670497-811f-5723-95f4-efafbe843854", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6ff78a15-d82d-53f7-924a-f3ceb8e59a5b", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a030691b-c387-5285-b16c-5a751971aeb7", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:512da442-7444-5ba2-97ed-4e8f34eb4255", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:907175eb-88be-5839-9f17-d2f04a5768cd", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4eb3e064-211e-5270-8fda-8dcfaf7a5fab", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:13214450-7f45-5dd6-aa54-7e3e7d149854", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0e1a1134-a89f-5748-b94b-37f0efaf939c", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4e6c4fc4-49d7-57c8-8ffa-758c10e13f21", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.10" } ] }