{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:42694feb-f1f6-5249-9504-6c2bbe4a7710", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-r2dbc", "version": "6.1.20-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:efcfc390-4466-5551-9c67-08a804611feb", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:edbd3129-ed83-5d24-a956-1c22fcf3069a", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a0fcaba6-00bf-5e25-b33b-0265fa0a178b", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cb56d0de-b287-5559-b9bf-ca4a08f3869c", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0b00c29c-0ff1-5509-9cfc-a0faea314bf1", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:70cdeb1a-41f9-5213-b6ba-810671ca35a2", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ee63f6f7-2c3c-52de-85fa-0decb3e509c6", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:48fbf4fe-a41b-5574-b084-d8b1ab4e3cba", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9a9a62be-f3cf-5770-9bad-d07f3fbc53c4", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9dbfc447-22be-506d-9789-4e7cc0a14915", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5bc97f37-4e1d-5fc3-85fb-010f995ed62d", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:49c898b3-e842-56c3-9fa9-90db9f736651", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:efa747c3-5e87-5bc7-855f-b3e17251ca18", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5b1ad931-5ca3-59e9-a418-fc7df283d252", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:863d063c-3885-59b2-8a0f-e5be4cdbcde3", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6205c312-d6b9-5c36-a94c-8e6da794bfb2", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f3374038-1b6a-5daa-8407-f0c778fbc799", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7953d443-5c13-5cf1-acdf-18ffa7263c72", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ea6017d5-7d31-5763-b008-3b72d83a9a13", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b696a11d-8398-5b38-bade-d394cef2ee4d", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3ac14a10-204e-541c-9f94-72ff1c4b7ff6", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:13ab252f-dfb5-509f-9c7d-b900a13f39a8", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:06c6d2e6-f6b6-571a-8faa-8eec8415095b", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:989abcfc-81b8-5305-93ac-3a2a6ef042cf", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fc6d96d0-dd39-5ce3-89b7-d75e57f4c268", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f6e5f8be-3544-5d64-97ac-6b4d6688275a", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:509ec231-cad2-5f05-8845-0a2d6e246b0c", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c9af76f8-c898-5fb6-bcaf-107ceb879ad7", "id": "CVE-2026-47885", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c00a02b2-ddf8-5cca-9ac0-7b9586d2b23e", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fc5a3d83-797c-5071-b58f-927f8a21ae52", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:59dcc924-2d1c-5d54-8365-544dd8d1bad2", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bdc48918-abb9-5ca5-ad00-23f99c7f24c3", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5ce3ce24-3585-5747-808b-ad88a89e45b9", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:76854e78-2d25-5710-b563-d761e5a834ee", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:229b6f65-229c-5dec-bb76-25097fda2992", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d8fcef53-c6fd-5119-b0c8-077b492907a3", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b78b6abe-09b3-5d29-bb63-15464f00bea4", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d6032cae-b82b-5ee4-a11c-06a1b1dd2d65", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fd2ae100-3309-5e48-bd08-8262af68ee30", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8255cafd-8016-52a0-963c-64710a96f6d8", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.20-tuxcare.8 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.8" } ] }