{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c40b3fcc-fa65-5b83-92ab-a027fb42859d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-websocket", "version": "6.1.21-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bda1b20d-1bac-5445-b9e5-527ed7f092f0", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-websocket. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:99885a0b-3e16-56a4-881c-11c696887681", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9fd394f6-a117-51c5-8009-bb21cef43e09", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ca1ae3d3-52db-563a-99be-2f9216ef40b9", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b5ae002b-4080-56fa-8719-b4c0fca51c18", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8de53bc0-fe2f-53d2-b9d8-e6b05eaf1bf7", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:76801d96-be78-586c-9cf3-e0030f965224", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:690659a3-b8f7-5fce-b397-068afd1dcd6b", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c7afbbbd-e29d-5009-84b7-162dd06077df", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:65ce5e31-22f3-542b-bdb6-276f25c65e6b", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5f8b1a74-859d-52e8-9c5b-1bc5e284c68d", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:71e26922-8ec6-52f5-a01e-0963679f6e55", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c8c0770d-a7e1-5f99-8ae9-4421479d0806", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d3fa0b5c-f8ff-546d-be57-e9a0978971e1", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8be32c13-4b76-5c6c-90f1-f5a891b200d8", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:356af84b-6d09-5064-a88b-09cdee10e811", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3b1b3cee-7639-5d23-9770-fe0394666843", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5ef73fa0-56db-5659-b201-fe28561a80b9", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c3c3f259-8236-5fa9-ad95-210990623443", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:12540eb5-7fc2-5e42-ab71-1c462669dd50", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f8182e6f-5680-5f5a-bccc-a122684406b3", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0e74875d-1754-5821-a272-1b1caee62b4a", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bf70dfbf-0010-5ffe-a0f4-6f80dc910b8d", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7038905a-5c44-54a9-8feb-b40750afa20c", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e47ccc4a-483f-5321-83ca-a2ccdffea2a7", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:e95c2e61-dacb-5ba3-b02b-3fdb3fcc3e0c", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7494803d-6db5-5fe2-85e2-d7b9ddccb977", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:190dfb06-f80b-5587-97e8-ed2b7c3db5cd", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2b76dfc6-f004-5816-b632-a3da186ae487", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:41de1951-c477-5570-93e2-51ea48e03534", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0f3f6b12-023a-5e88-8a46-281ff95896cc", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:71c1e446-d644-5989-a249-542d9354ab5b", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9ef1d6e9-da6c-5f71-b75f-9b52f87aa3b4", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:570065da-c701-598a-a353-37c8cac8ba45", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:f37a3ac6-d5a7-53ab-92a9-60c2d95220a3", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bf5e3b5c-b990-5e0f-bd93-cd4b7079e3d4", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:83af1997-2bad-5c90-a79a-a681c246fcb4", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:d5c5f1d5-db28-57f1-9b7f-0f1c7a118cd1", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:169fd431-d52c-5bec-a6b9-fc0378bce078", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.21-tuxcare.12" } ] }