{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5bda8132-ed59-56d9-a88c-3218cb9cfab5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11", "type": "library", "group": "org.springframework", "name": "spring-instrument", "version": "6.1.21-tuxcare.11", "purl": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a5a74ba0-414a-57b8-95c9-1e5e90d286d8", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.11 of org.springframework:spring-instrument. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ad411ee5-99c1-5bd3-a0c0-5ef5611b2e1b", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4865fe39-9c5a-5c20-81a1-d367c402d3d2", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1112fcb5-9cdc-5c05-bb08-69c25ff0484b", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2f23647d-f5cc-5439-a4f2-4760245d19d6", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6d2dc55d-0c19-57f9-9150-d16a58b8ac92", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:aedf68cc-aeff-5b79-a82a-6333397f8606", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:75e59bd7-d0be-597d-bece-ad3f2a1a32b9", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ac78e0d1-5fce-5fd2-a306-407ca1e876b8", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ff64e618-bf5f-5623-b4f0-7ade5411f0f0", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5171ba43-3693-59da-acb5-e303424eaf99", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e9f69df4-a148-58f6-84b7-1555733a5aa0", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d675ace2-c659-541b-afad-b305cd67d7d6", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:87b19680-560d-5eab-b301-160b996d33d3", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2df82e84-bd48-5534-8c09-b499cfba3c4a", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1936efcd-47c3-5137-b246-29bdd7e0b1b5", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4bc9a5e2-c58f-5986-a783-81c0227b8981", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5ed20905-29ad-52e3-bccd-7a96391e020b", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1ada35c0-acd0-52ed-bd00-9d4989692443", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f1704ab4-685d-5ea1-9b51-0d2df709015b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f5dbfe5b-8f74-5c29-9449-22a1fdd47231", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4a0f70f3-b9c6-5e18-b431-10e870a0d776", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e698f60e-8bbc-5312-b86e-41af7fd6e525", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:50a09f6a-bb04-58fa-aa51-0ccb05ae8f89", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:683875e9-7f6a-5025-9aca-a49e35b24ac8", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:428f9f75-4531-5552-9511-64c1c0834a89", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6e5c2ccc-4a65-53b5-89e3-1623888dcaeb", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d8cbd8ca-b4b0-5f8f-9a2a-ba2a820a1d0a", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2e8836d2-b2f6-511f-8420-160a23c2cd0c", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2dee6b7d-267d-50ee-a8a9-dfdea0493ea0", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d444f151-c41d-505e-8cf2-ad0b620e904a", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:678514b7-6302-519c-bdfd-5e6508f8c222", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c11f50da-f004-576e-99c2-c82da32f464a", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0f0c76fc-d0ab-5345-b3a6-f574c66ed5bb", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5286be3d-5cb0-5a14-a0f2-42dc09b8e53a", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c836c1fb-1c46-56a2-be4c-47b676aae17f", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3cd83a4f-0965-51fa-a496-c687f541a23f", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2858e5a4-7565-5634-a143-7d338393a2ba", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:08a4ce1a-5e87-5e57-abda-d65935312055", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-instrument." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.11" } ] }