{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cae71fb4-436d-5203-beb4-32b136fa932e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10", "type": "library", "group": "org.springframework.boot", "name": "spring-boot-cli", "version": "2.4.6-tuxcare.10", "purl": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e9b95085-6fa0-506e-a28b-3eaa16a9f16a", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:67d061a6-92af-5791-8c41-34200e10a03c", "id": "CVE-2023-20873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0e7afdd9-8ace-5962-b808-d0fd76f08b5a", "id": "CVE-2023-20883", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:64ec1915-01ab-5633-8cdb-71ea2bd4a5f9", "id": "CVE-2023-34055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c87c7b21-37bb-5667-9115-07161b9c93f0", "id": "CVE-2023-38286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:40b9d9d7-2c0d-5ed1-996c-dbfcf8d5c4a5", "id": "CVE-2024-38807", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38807 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5a86a863-b3c5-5bd9-a62d-24040bbf5baa", "id": "CVE-2025-22235", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:84f84796-ea84-53c2-846f-d9088793bfbe", "id": "CVE-2026-22733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:48a2337a-a5f7-54db-b678-6b168594618d", "id": "CVE-2026-40972", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2fbf2df8-6f29-5b3b-bdb2-02ad52a1ddf4", "id": "CVE-2026-40973", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:26f38d17-2d6b-568e-b84f-3a208bd64eb9", "id": "CVE-2026-40974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:03cc18ef-b582-5474-b122-66c0042b55df", "id": "CVE-2026-40975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:64a34c79-e5a7-56ae-9dcb-58f3e963d50b", "id": "CVE-2026-40977", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c1219c88-3739-55c0-a4a8-07b7b8f4ffd6", "id": "CVE-2026-40992", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-40992 does not affect version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli. version is out of affected scope 3.4.0 - 3.4.16, 3.5.0 - 3.5.14, 4.0.0 - 4.0.6; MailProperties has no Ssl class and the mail autoconfigure package has zero ssl references, so the vulnerable mail SSL auto-config code path is not present" }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5a6cb3e2-57a2-59db-a960-d18f0a31c5a5", "id": "CVE-2026-41001", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41001 is fixed in version 2.4.6-tuxcare.10 of org.springframework.boot:spring-boot-cli." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-cli@2.4.6-tuxcare.10" } ] }