{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:458da1b7-89c9-5926-a7e6-5f6d1724637d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-context", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:f68ca9c9-4fdc-52dd-bd5b-fde6ba394f74", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-context. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:43f8e168-0b49-5e15-9d99-2b88bf91cbcb", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d1f38970-7c1e-5e99-90a7-8e88d5935238", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:305dd3d5-d81e-5b0b-adb2-cc078249a0b1", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:45253003-bd9c-51b0-95aa-e22443438ebe", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:02d7c5dc-1d1f-5b15-a54f-b8ad00bc79d5", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:125b71b4-6d98-5218-b64a-5dbb1f4d8198", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ee75b717-3180-543f-9ba3-1779804b7231", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8e545c50-8506-506d-9d65-b8b69295020e", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4f52a0ec-9885-54ec-8e09-f9186d355d9d", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:367e16e6-58de-530c-b0dc-1e4485ed0532", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:18339560-83ae-519d-a429-e65311f50282", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:93c1e5ed-6e86-5954-98f4-35efab496bb0", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:706ee056-bdec-5f40-8cba-dba0bca38f9f", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:711579cc-9bba-508e-8a4c-4da1a169a0bf", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:703a47e0-31e8-5b89-a018-247be4a7f295", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a8565dce-8e5b-57fb-93f8-d6608c1c808f", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1b062bae-3cb4-589c-9553-3b486543b8dc", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2467c880-7c9b-5b39-9b58-ad468f9f0651", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d045efe2-5cb1-540c-9651-15e6b50b3a5f", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f86340c2-b67a-5bf6-b712-bce7fe90bb2c", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6ee6479f-f8cd-5c89-9c0c-a456e72f2465", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6ed08a54-861a-5d97-940c-95d2aab34c1b", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ef246dfd-8407-597c-8fc9-3e8ec7db238a", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0d84f8b4-fdcd-5d28-956f-693aae2e34f6", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:37e2f7af-71bc-5c06-837c-e4bbb2f2be48", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:82823586-cdcc-50ef-a09b-b78cf6fa43d8", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:802d9955-a0e0-5412-aee4-ce38a2865bbf", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9d696dda-e2d3-544d-b680-ab7735fe03b9", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a7a06336-d666-5f7e-86c2-f1adcf3fc888", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b3f3eb24-a81e-5bd5-bc14-c5d889d0b368", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a283b7c2-8e98-5893-868b-192f49fde118", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2782a0fa-23a5-5ed0-8d99-d25018f6fc7f", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e29736ca-aa7a-54ae-afc7-0b75b9fd0ad1", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bdf12f19-13f2-5333-a560-5ddfd8436e0f", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f4b168c8-312e-5843-ba0d-d82ce99b5e10", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e2eda507-4eef-5385-be11-a9be5c5df6f9", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7ed7286b-281f-5f4c-92f7-7845fb93f360", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c881e234-cc78-576a-8ac4-bc3f076328c2", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c5c3a23f-f40e-5d8d-8404-ef2b0c7d373e", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-context." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.9" } ] }