{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d35a7bf8-ffd9-54f0-8bd6-19839c29d446", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-jcl", "version": "6.1.21-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:363324d1-8c57-5d19-8dba-56ba00082696", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.6 of org.springframework:spring-jcl. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2b9e4d41-c054-5097-a371-966aa1f02246", "id": "CVE-2025-41242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:bd90c494-fe8d-5d2f-9b9f-36f665c8d1a0", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b4a3d2dc-7804-5aa2-8bf1-2f7c5a7ba649", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:667b3e6e-4b85-5ae8-88cf-e42844dde30b", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7b235b01-1d2c-58c9-b01a-c24de581c336", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d76c6791-7e91-578d-8424-298f4001bd73", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:798b97f3-4f4a-5183-a384-a95c735df84a", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b58ea40b-c0cb-562b-b02a-74596cff2666", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3d1b0621-af3e-545e-93fa-36e51715a004", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f4f52ff8-3090-51c0-8fd1-caca9b48b160", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cefb061b-c6ba-5b63-8f6c-5f9bc81ace9c", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f7889775-0206-5c20-96d5-4000285ba7fa", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9d765cb9-372f-58bd-a527-6f58c5b18b50", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:44085c93-ab6a-5e30-b42c-9bb0e80660b6", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ed983d74-2a4a-54f1-907d-f4fce20b9e1c", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2bc801a0-1471-59d4-ba0c-1226d6680962", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:08adce4d-cac1-5724-b834-c059390431d9", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:139b2730-acc9-5d19-9ef0-7fa12f3e0bb0", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e4dc6d61-b467-53a2-a30c-2879328b6c51", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:85e72728-0ec9-5a39-b4b2-cfdf2503cf15", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1ab55a1a-fa19-5a37-9668-da1c272f6968", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:db163ea1-8c24-5540-8beb-1ac2037ed431", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:befb4cec-4447-5083-aa88-00a383d6c8cf", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:13648a36-cd1b-564e-bcd5-094189e82193", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a50b91f9-95e8-5219-9b64-72cbf23129bd", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1b45bd89-591c-549a-a514-9544a0dbd8a3", "id": "CVE-2026-47885", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0863ad99-8fc9-5c63-a2df-4ac5de3d23ea", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0e3e85f4-e8c8-5960-986e-b5043b70fbd0", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3b838b3e-fbc2-53b5-9964-0bb79b60441b", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2c447faa-b827-57de-8694-3d83ecc128d4", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c0328821-b2cb-55aa-b975-16ce7415901b", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:66ebd5e5-9cd8-5ee7-9246-cde35653a6d9", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e7938b98-8ada-5758-8529-e3e3ca443288", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:f80dc13f-e49d-5eac-aaaa-391703f5a60e", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7493a775-7b3d-583c-a072-6c3ac4368376", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:fbffa67b-fea2-5f77-963a-9bdedacdb44a", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:109a7bdb-45cd-540d-b70f-12a09a9c02c0", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:56057521-1f42-5bf7-b721-55b5b581f284", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.21-tuxcare.6 of org.springframework:spring-jcl." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.21-tuxcare.6" } ] }