{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:aa2ebf6d-c286-52a7-b3b2-27cacdf07dd0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11", "type": "library", "group": "org.springframework", "name": "spring-oxm", "version": "6.1.21-tuxcare.11", "purl": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:0a62ac59-afdd-5974-9ca0-a575967d4631", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.11 of org.springframework:spring-oxm. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a7afa5f5-44d5-5fc9-8c0e-e651d10f0839", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0f0c259f-cca8-5c1d-a4d6-12eb4609442e", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f94044df-1b88-56f0-8d25-375135069018", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:b633e1cd-74b5-575d-8329-e977dffe65d9", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4144f32f-4ad7-5ba7-a572-99f8874c9d59", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:087508bc-b56a-5336-91e1-47ef3da7c0b0", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a7164a6a-fd86-5fdb-8b42-bfce0b673828", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8ed2e44a-a65a-5162-8fbf-271837afe598", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d292a32c-f805-502b-9659-695ccebcf30b", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:bf7f8661-8a30-50e4-bea0-64510c378abb", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ee6b7e11-fcb6-5ffa-b90a-7648775b6415", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e7def6b0-aac1-5128-816b-90f66dabdca7", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:064d8149-4b79-5369-b210-59fc8ae3e7a3", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:395dff9b-16df-59cd-b5e2-faccbcdb28c0", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:237f945e-5ca9-5a13-bb93-8f8ee97862b0", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a0afdb2d-ba41-5e81-a216-c6f1bbfb7edf", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4b6b3e7d-eb15-54cb-86ba-f14d37727320", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f3d4b0f9-d6af-5d30-833f-bc7b4aaf2f8f", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5a51734a-59ad-5c3f-a79d-934b7ef4d10b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:81161e95-1c1a-513b-a372-30aa3ce03618", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d8f9cdab-1305-514f-a517-502455f9b013", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1398047d-928e-52ee-aa06-0c3509566611", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7dd55237-4459-5bd9-bd37-6c3b09a0ec64", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:ad61b845-96c7-5808-81e3-d4ab28ff90b6", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:777ad4b5-75d9-584f-8fee-c55e8a81cf57", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0116dc2d-2c73-51fa-9baf-dcf876570ca7", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:16ef5408-8124-528d-aae1-888bb878a5be", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:88b11641-91c5-5295-b8b3-eab67a503176", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1e3ae6c8-52cb-5625-82d4-3d62a32ec89b", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:595ba9ea-6ba3-5c7a-95db-533928311de8", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a04ff05b-3582-55f7-99ca-9d066357b80a", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:07c1c40b-4b6b-510f-abd5-a62a35c89a2f", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c451c904-4eba-57cb-ad4b-26276137c82d", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5aea1a15-1685-5256-9e3d-2dd059a1df07", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:e08a43f7-5112-5857-b528-076b495a8198", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:25f8c07b-ac91-55bd-9801-6982e7929f42", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6cb7603d-aed7-5cdb-9dae-6a69b3539fef", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:bbd0a932-d841-5eae-9904-09de8733d9df", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-oxm." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.11" } ] }