{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1e90c243-d390-5aef-a25a-74a1cd2df7b7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:6e34b08b-416e-574e-9bd0-7c3639fb4db0", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-oxm. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6d4f84de-c7ac-5301-8aaf-82b0e3d37b3b", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e7b23f8d-e11b-5390-a592-717ff1fa3148", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f4e3a942-1819-5042-aae4-70913fcebd52", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b58f557a-d19f-59d4-92f2-b78314b1304f", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:acf216f9-7692-504d-ab1d-d657448d5b64", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b4509aa3-4bec-57d5-92f7-9230a5ee9be3", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:52e217c7-ce35-5d39-a248-c7c5892a328d", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fb4d40c2-6a76-52f9-b07c-68f82aa43457", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:534bcffc-28ac-5d14-86d8-f9f973e68eed", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6660909f-97b1-5508-9475-d2df67e1bddb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b5789653-167a-57a7-b20d-83db1d9bc96f", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3ec04122-d443-5d48-b1d3-dbb24cce0cdb", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7af2fc69-af52-5460-a456-df25c25a968f", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:700efd3f-7515-5d77-a255-b55dc393ff7a", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:51b0a929-f6f4-539b-80ef-b8d960996af7", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:88db98cb-3ac8-56bf-b104-fd0dbbfc9b82", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b53d4f4f-2100-5b30-ad82-98f43554cfcd", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9e3e9b82-867a-56f3-ac01-99b26c300e7e", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cc458127-a5dc-5327-9c4b-488e9516bc12", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2eaab0cd-c5c5-56e4-96d1-cc11a6e88759", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d3ce6894-e711-50e4-826f-81ef005b8af7", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:354858d0-3d36-5d90-801b-694f345dde9f", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9a9400f5-44d7-59b4-9e11-7a3094cbe3b9", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:545b0931-a719-57ef-991a-c779a581eb46", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0390ba58-c93b-56d0-98af-211aeb488177", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:42c89a38-cefd-549c-8b8f-ee39318afc5a", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7c96d222-a203-59da-85e6-22b586d661e6", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4294b663-1f76-5442-b43b-6de34cdd5d4d", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:275a62ae-f021-53c0-9a6c-c9b6981dc884", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:93a4255b-4278-5022-9ee3-2289f1d2909a", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:54a6e72d-9fca-57f3-b992-204bfc162123", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cc69cc6a-6e92-5fc1-9e36-324368bd54d5", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ef62318d-b22a-56b0-b964-fa25c2b1abef", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3b611a2a-91fa-5957-a37a-f0c8f4fd0dd9", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:49ddd714-5505-5af8-990a-84ad38e82d26", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bbcd7d6d-b00d-501c-84b7-c67b4d5762b2", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:78bf0655-3849-54a6-a9fe-dd2a1653f914", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2942ea4e-898a-5abe-8ce2-1e90aef96af5", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b3329007-e109-5ac8-ae68-5783b0630040", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.20-tuxcare.9" } ] }