{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:43d4c187-0133-57d6-bf9d-32e136fe6e56", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-context-support", "version": "6.1.20-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d1884258-8a1e-5036-9d31-27900f63fb1e", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.8 of org.springframework:spring-context-support. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:277cd835-69a5-5bdb-a6d4-f589ea2a068c", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6b38f992-b0b8-5a77-bf58-4d231c482d82", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bcdaf9af-c2cb-55c5-87a5-1e81b85c0869", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8fe8e7a6-8b78-58e9-a3a9-c7617305e575", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0c733ad7-4e46-5d61-adae-c91ac1b08e06", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:55033677-4615-5d6c-b7f8-6e838b8e8ba5", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:30efc88a-fbee-5714-b9ea-f1b914c932fc", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b28c85bc-0ce1-5582-b488-5c6f75e6df11", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f37c7de7-864e-5a43-9278-3d98cbba9d39", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:efe40650-db66-5484-9ef2-f0330687d9b5", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7b663c8e-d88c-5217-b29a-4f358f62973f", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:82cc7f75-875e-5712-9ba7-3369282d3a21", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9145f5d2-c747-5ebb-a097-0289b565848f", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e4f8598b-bec1-5671-a101-98b255fd51fa", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:333358fa-402e-5aca-b40b-9bbe0e91d98f", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4f2c4a4c-5702-59be-b48a-cb0b69f34e1a", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d622d2dd-9d77-5ac4-ae7f-5c6cc999a1c9", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c0025f62-e6b4-55d5-943e-bc66b412b02f", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ed1038b6-da24-51cc-8dc6-8a9e127db26a", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f15e9126-b553-5c49-95eb-af897d7a1ced", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:08c82341-6ad3-5615-93a2-4118dcae0e75", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7b618379-c27e-5209-b59b-5aafdaa866c8", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c5994e7b-038c-5add-8dac-d611b1be37f0", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e8be46dc-a386-5afa-864d-795b8c72cee9", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3f5ba8a6-e946-5165-919d-367c92e434bf", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2a00cd30-2888-5e28-9877-6f7ea064312b", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9e75329b-f2a1-505c-9d4b-064778052579", "id": "CVE-2026-47885", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f7dac27a-cee5-5234-a9f0-8bfc53a7bee0", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:691e1de1-abb9-54e6-a5d1-6dd6dd87e3e6", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4098ba62-b8b1-58fa-b830-52208109d5fc", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a33cbea9-acf5-59c9-b0d9-5a6e3709efda", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ab6d3a06-3b7b-5447-82d3-76f843c0df4f", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d76e4198-759c-502c-a6f2-62797a43128a", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b8ac844f-d62f-59af-ba5f-bcd3469fb617", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:05f6a2ca-3705-5629-9371-ce5abb7cf668", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:90e0309d-9e4f-5703-bdb4-3659b094e49e", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6d93f12d-b725-5e53-bd2f-071cf17247eb", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:36973ae4-a10e-5226-9ab7-b657e3b8024c", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:386bd4e8-7a8e-5270-95fe-bbb4dadea3a6", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.20-tuxcare.8 of org.springframework:spring-context-support." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.20-tuxcare.8" } ] }