{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:10019b97-f8d7-5561-afe2-7d86d0ead57a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-orm", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:aca425e3-b3b2-5a87-8737-2f01f36dcd76", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-orm. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:763641ef-6219-5a2d-bf2a-9a627553b3b7", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:054cf882-be77-5cd7-9d93-47cf2b24a7a0", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:109bf45b-4a99-5ce5-88f2-48194fd14e2d", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:55610c62-b94f-59b8-a65d-0834c4a15863", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1652f9aa-9500-580c-b027-614ee6b25708", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3ae9b9de-6a2d-5674-bd6d-de6e17c2e9db", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:90cdd781-920d-5e28-9e5f-77dc012eb722", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c207bb46-0654-5f98-989a-c22de8eb74d0", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:373075f8-6400-50dc-b957-5174b31f421b", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8c65b6b4-75a9-5418-9e66-981cfc5a3cef", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:40aa79de-3896-579b-bd60-336e1f684d18", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2f022fd3-fbd2-5ef8-a7c7-e6b8d3041073", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:db298d21-9b61-589e-858e-a07e62fdc506", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:868155a8-44cc-5ee9-a5c6-a4f4c75ded74", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a7cc4244-08aa-5ecf-8b48-a7ab9f4fb6f6", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0aeec830-8466-5cd0-b925-29c404fb90a4", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f0790291-0604-50db-a0f7-b3c9ee6b1ecc", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9f072b90-9c35-5230-a7b5-0c90434bf86e", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:26a3ba56-6d21-5580-a30e-ebbbdb9d1d22", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:544a9d9f-8219-5abb-9f09-e3800218678b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f7815cb1-0af7-5af6-9a4a-2114fb8ca8ec", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fc06e70c-87c5-5aad-bd1f-f5f1519eaddf", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f6939bb2-1bf9-506f-bab5-7948c766d66d", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4b21648c-a1e6-582d-8a66-431bd9ddecba", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cc805f60-c38c-55af-a358-a321f5c10cd3", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:809edd5e-60aa-5220-83d2-1c6836865d40", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:64abf8c3-3850-5a00-bd2b-4aceb3ae864e", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:694357c7-1e34-55fc-8a48-78f065ba1c35", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1ad7391e-698a-5ea9-b6c0-22e047d6348f", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fc77affb-10d3-51ff-a9b0-de9ce88a1896", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a1cfc9e0-21fd-5dc0-a7b4-d161100fe547", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7d15f144-d501-53b7-bdd9-e9d3d3dec402", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:420e5e58-77e1-5478-be80-55dbd818d8f5", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:dddb7d97-182d-5c84-a352-532963fe7a74", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b2d1853f-6477-5da2-92f4-47203f7aaf4f", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:19574698-b395-5c5b-a7dc-03cd7a7acb76", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:db9c22f0-a802-5e8a-9818-ee67589fe229", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2fe80c8c-7511-51aa-8206-6af02fb116d5", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:06ea285e-94b7-521b-a8ce-f19d60320ebd", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-orm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.20-tuxcare.9" } ] }