{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:660cdd17-5ffa-5dda-bb5c-6a78f8828793", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:0a9fc0fa-ee21-5231-a10d-223d39b28c53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3d1050b4-3511-5805-9629-e9477b1395db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:14b10bc6-07b1-53d6-b376-be210e98ba7b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d10c17c5-6ed7-5ac6-bb05-ea5a827f0817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:359d6266-777b-5d2b-b68e-826db8c302b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:727f4911-80b7-5e35-899c-e1bd5aefd15a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e67b5a42-e17c-5d1c-8e7d-0ef97bda7f3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a429d68a-b03e-5146-9ed7-ca73125d394b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b6d7d98b-4eca-5ff7-961c-ba8825671138", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:77e952aa-8630-50e7-964e-dd130c564ba7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b314d44a-3c89-5b36-a27c-bec15e78da63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b01d93f9-d11e-5715-a859-6514ab8e89ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a9bfdb0a-eb90-5a3b-ad73-2faa1f0e58d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b1c0fd78-1a38-580d-bf43-dd726e2610e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:34199e1f-33bc-5988-a0ba-51c420cb0e12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:570ec0c3-89c9-5b9a-b8bb-b995ae193d53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:422a8d8f-833b-57e8-88b0-0143e0762079", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3a96e669-157c-5573-952b-15015652873b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1ee0fef0-26bc-582f-a7ad-96b3b59b026b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:aa51caf3-485b-5451-982d-59edf82996b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a99c5fe3-d55c-5f7b-918c-b380f221fe10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ea1c2e45-70dc-5b18-8a2d-06cc3563b3cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e2ce1df3-08cb-573a-bf8d-fd62f8adfb26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:88a0dbce-f34d-554b-9f57-269b298f44d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8c962fb6-6b00-5084-92c8-b1a0b602087b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:dc6847bc-7e3a-57cd-bc3d-6b22f78ff4a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:68d0a3dc-9071-5138-a13f-5c3d3c96bb70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6b8e1502-7bed-572e-83db-d50214504b33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:06874e57-0002-54f9-9aef-fdbc422b7089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:931c7549-5139-5722-a857-a23aea075a49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e6fb6e8d-c5a2-5b29-aa71-b6820e6646d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3700b176-ebc3-5d75-b8fb-9755beef71ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:78f154dc-aaf5-50b4-bc87-e932bee0b40d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f4b78869-a07d-5b84-bdb8-743cad04f4b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9b6d1ac7-1557-539a-bb84-9690d8e9acb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:373a4b23-2259-5a18-8d18-ee46bcaf2b0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ad140032-b680-53b4-bd88-a52c9d232e7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a55e05d7-c6fd-5c8a-8b1e-3efc2840d764", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e49dc6cf-6857-5057-89bf-80222e312f91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:af0e14d6-dec9-57f1-8c8a-4445066d6dd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2fc38f28-8e4e-5867-ae61-0d84ecf1a7eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:05d31e50-b86b-5f0f-808e-2e1a599540a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f5ca01f4-1186-5423-9400-8b12259c1786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.2.3-tuxcare.2" } ] }