{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0e526570-92d1-5f41-8bd4-a331fa70f5dd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:abbc909d-b776-5196-9440-a097bc4879fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3076321b-e9a5-5b30-b21a-a75cc7b347e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:da7b61e5-9f1c-5f5e-868a-f70702368273", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:972bb3e1-d139-5eeb-9f33-3ae1a29c204a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1b095d35-b9c5-5037-b776-f93d43318f4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8272aa1a-d066-59d6-8774-c3a5b3f1e23a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:93e8752c-5d44-536c-8018-00151185511a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:44fe8bf9-13dd-5358-bcba-82a288d65b6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6185a6e2-c313-5257-8aed-77374f8f7c95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5728d842-77ba-5e2b-b4d0-f1fb37f6092c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a418e2dc-bdf3-542e-ac6b-98ce3032fd18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e5b19412-ff62-5460-9a3a-f44e76abb2d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fc98c1ae-68ee-5b28-a10f-06a3566dff0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1cf2d3fa-cf9e-5076-8e37-c5248c6160a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6cacab31-62de-5dd6-a60d-1f06a141644b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:daa3ff9d-7db0-5dad-8511-1cc435545cc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f46c36bd-0b2a-535c-aa2a-af27c7035bd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:209a71f7-ae52-52f9-bcbb-be8fce4e88f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ba885ef5-5580-5208-80a3-1f3908a78abd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c0108422-9946-55bd-8bf1-81d18edbd77a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2fb6b1bb-4ca8-59b0-8d5d-2d8249aa8b90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:38f5fb45-70d4-5ff7-88c2-7d2abdd28ba3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-orm, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7a9520a5-fa12-56ed-98f3-f4f35617c495", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:4e6b201c-dc17-566b-919e-373521842f4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d14f0d2c-d32e-5e71-b043-8776582a14ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7a13b3be-af26-5dd7-a050-c786359c7e5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e87fb091-185b-58e3-b521-46e4d1d81503", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1ff41b02-ca00-5834-bc12-cfe511dfd1eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1c355e44-eef7-5acc-8869-b1aafd17c777", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9c44877e-a6a8-5514-bef9-f651ab86bc0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f3f343ac-c96b-5000-ae8b-96511cf83ea6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f901467d-2eaa-5fe1-80fe-2bf81b595005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:cef34ed1-c2e5-56a7-8e25-6a8969eeb087", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9c85132b-03fe-56bb-bad1-d27357e4a88b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:20bca03b-333e-5af8-b855-f9a1e87852b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:32fdfa7f-26f8-5b54-89d7-511ce91c8ee7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8a73a96c-cdb8-555a-a7cc-73dc4c6d8ce9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:716fea7a-7dcb-5f5a-b496-33ae650c0ba8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:575609e0-5b82-56f5-98ab-df760621d24a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c13b0b35-759b-5418-a8a6-27f4ce9fd357", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fe8ae650-b518-5df3-8026-3557ddfcd1d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8f55a063-cf1e-5134-b71a-4bf060e9c78b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:acb01fde-c661-5d06-82f7-cf9e5be9374c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.3-tuxcare.2" } ] }