{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d44e9c0e-0eff-5146-a147-b0262f005ae6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-instrument", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7357eb4c-91bc-58a5-884e-c186a5d2d2bb", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-instrument. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:224c6b1c-87fb-5caa-8e1e-06547b020ef5", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f2ff0f69-23dc-5bd1-bf47-d53c25d341e5", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b30fc717-07cf-5617-b4f7-1b103958eff6", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9e2cc46a-ab38-5143-b7c5-e0c37c739374", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:393f6ba7-a4db-584a-978e-139e77281040", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cd0b67ca-7fe2-5632-921f-ad2a128cf7cd", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:704121d0-5fce-545c-99f5-c614c69a3b37", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ecbaa062-4e84-51a9-8dd2-d063d462e7dc", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4dc4fef9-3295-5522-b7e7-f4b35882c87c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7e5f699b-b5c8-5226-b0f0-47d839337723", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7ab8d1ef-ed2b-584c-97ea-4ef5045075d5", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a369a68e-4ed6-5a45-926d-80e615b52ec4", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2c6f7d5a-72f6-5e70-9713-d8253abe4456", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a3fd0638-a7f4-5f64-b5ac-7ecdc6e14014", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8bc04427-b700-588b-b11c-e7534059f1d9", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6e0797dd-7626-5a67-ad2d-f837d661e89a", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:998e6040-1c6f-5f92-bc0e-284f7523f99d", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:57a600be-3636-5a64-991e-61b4b9b8a948", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4372c1a8-ae28-5036-8388-d388fe6be7e1", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1067b846-8225-5fd9-8076-52660dc54d1f", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:98e639d3-f15b-5998-8789-0d9a330d1381", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6435e9b1-fef9-5777-a2f3-86b8dd315119", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5ae686a2-d3a8-5ae6-850e-f4dd78f676a8", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b38304a7-2f36-5431-ad0a-309b53487819", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bad1be57-4fe1-51c0-8ffe-29772b7cc0ab", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ba3b0011-0eee-560d-9947-cdf744d82daf", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:dcd16e4d-64a2-5f40-bd1d-bcb83783b784", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:414fe19f-9d6c-541a-b87c-f20f90cdb175", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b98aea0a-07f2-5379-965c-df318cceff7a", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:72415ac3-59e3-5565-aaf2-51ef09e45a15", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2504b93b-5a5f-53fc-8864-400f6bc1010c", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a107b4b9-5ebc-501a-a453-d24aa4f24e2f", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:009124f0-5983-5e69-9077-da693ccd3b76", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c43e12ff-b6f5-5020-8401-80a2ae39fa65", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1e59ca7a-3230-5a76-bd60-c8169b3fa579", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:042efd6a-3b54-5911-9ebc-422aab9ff915", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:16aa6571-22fb-5a43-a6f5-e22c412db5af", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:183ec940-382c-5a71-b472-244c2c19771f", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:60014314-df89-569e-8bae-be559575ffd7", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.9" } ] }