{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:77893a3c-c38a-503a-9317-f1ee59606fde", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "6.1.21-tuxcare.11", "purl": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:af1e7be4-133c-58a6-9afd-65b02b4fc629", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.11 of org.springframework:spring-jcl. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:768cffd7-7b17-5e07-b43b-b7d25ba0aab2", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a50dd7b7-6077-591f-b3d8-93c49021c88d", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0153c224-a501-5e1c-a066-4a6dfd866bfe", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2bd35f53-5b2b-515b-8d2e-d83b7730cb71", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:da980ffe-eb46-5b19-88b5-ba81406b0c16", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:12494f4d-6382-542f-94f3-9278623b7969", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b1986aef-ea25-5614-b34b-eb4a44ceac72", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:41f077b4-47dd-5998-98d1-84afc6b7b19a", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c34504dd-fce3-5b6b-8411-6d04e9e5f3a0", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ffbfc500-960e-5707-b917-57b123359976", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e8e63ad0-988a-5f11-8224-a1641698b52c", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4d056e0d-44f4-5226-8254-5b5a1a1f3642", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4708db9f-e3db-5a07-934f-566e20683675", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2a8312b7-69b2-5d67-b0cb-15d2f3584d05", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:eaacadb3-147a-5749-a90e-d366381d3503", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cf96c7a1-3bb0-5b75-b099-7d35a38089b3", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3fc77855-266a-5654-883d-7409104ac90f", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:fe0dc4b4-2967-50ef-90b6-9c6e29f77346", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:555fa793-8f1e-57d0-93d2-2865f20e06e7", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:75df3277-63e0-5b2f-8e3f-25136416c628", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e6f3565f-c9b8-54f3-99d5-8671f76a1681", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e9f4565d-ae80-586b-ba5d-3f9f359e2bf1", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:41f1ad6a-13dc-5c6e-8358-867ab67c1f2c", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ba5798dc-e750-5df6-97ef-6f28aacaa2bb", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7169832d-c5e7-5282-800e-1d6196aab92a", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ca9f5002-ca04-52a1-9288-73e9408bc85c", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d5ec1dd8-99bb-5b8a-afa7-9ad3a100a440", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5be68ef6-7f28-5850-834c-a1c129138307", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:03a22a29-f435-59d9-9989-d82e08ff08ef", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:969a5165-f8c8-5c5c-b60f-28edea6c1081", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6c2b9d7e-70a6-5f93-a2a4-b4a7a1751f2b", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cbbec6b9-4e53-5bc1-88bc-72d3b3e28b64", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:01048483-07d5-5204-873b-efbaaf34e8b0", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:54a541a8-0a17-5e0b-a62e-3aada08d48f5", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2ed3f47b-16e2-50ff-a4a8-bb7f86326ce7", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6bb989fa-b835-5948-ab37-76abc7a77b47", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:94e29767-4a7f-545b-9001-901be38f0e0a", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:34060b12-1615-58f2-8002-5c4efb88a7a3", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.11" } ] }