{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:095ee5b8-8434-548b-bd48-0f338782c138", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-r2dbc", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:12f7fefc-0305-53bb-ba78-3ab87f03362b", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:028f48a9-0976-53b6-89a3-5e99b67036a5", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:20d10e9e-5c9a-59a0-8b9a-6d6531aeffc3", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:04f2566b-64dc-5d27-9d0d-5391b4263862", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7eafea99-bf11-54a9-a16d-e790b2ac9d2c", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c5440486-af87-5711-87e5-2454ea75ee6f", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:62b3cab3-a1d3-5e0b-8817-a67b50d9d6cd", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3ed2d2fb-388a-5521-a1e8-2fda4b9a96c0", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cbfc5ff9-e916-5360-a5dd-bf66a522d974", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fb2bbdfc-3cd3-5d30-b96f-057a8dbd9a06", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c368d788-3e50-5c30-92dd-0764717ddbee", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5cdfa689-e8f4-5548-90c4-04e959d09e89", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2fb9d8ad-bef4-5344-a0b5-df24ec00f0b9", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:37761d8f-e5c4-563c-a6f6-028087724ebf", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:085dfda8-409d-520c-906b-4e6b93280fc4", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c8070db3-207e-550f-8c7b-318000ea7a22", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:14e9f1c0-4653-51ba-9083-8abd0263192b", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:16f3ddde-7565-5544-97c0-39704766c31f", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0e805a27-e253-5867-b894-8590f2062a40", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d22e06c3-5fbd-5492-b95a-3e1f71586671", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8aea1824-3502-5d9b-906e-9e16b0692c8b", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:efabba1f-a3d0-5153-bd7d-60b148b3b85d", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cc87ab61-af44-5b72-9daa-9d315292c988", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e18ad95d-0a8c-526e-b13f-041f0fcf5bfa", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a916f69a-27b8-506b-b636-2e0d0a20f123", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:61ec8263-858a-525c-8b6c-e9a0c67fa053", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:588db0b7-0a6d-5f8f-892e-ba949ef30c9f", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8e501680-ea86-5a9a-93cf-7eadaa8a64a9", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fb87555c-6691-553b-83ad-aa1e3f6a4c06", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0b961dba-1b09-53de-b173-8065295b52de", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:110fffd3-82c9-5fda-8d7d-e61aa55f21cd", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b758ff0c-f48b-5f73-b470-3acbccf67a82", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ab75ffc9-7111-5f72-8f5a-7f04cb73e1f9", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:209bb957-9eb0-539c-9185-083f06c351e7", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a4226f85-7a85-55de-b67c-3548a9390061", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8069363a-07db-51aa-96ad-2db1a98a3b78", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a3bfedfe-8726-5698-bfbc-7f70331d1a9e", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fd2faac3-e12a-573d-864b-42539d379cdc", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:28b4c1b3-4a9e-505b-bc12-12821940d593", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:76747cfb-80f9-5d4f-9460-20f0e468da93", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-r2dbc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.1.20-tuxcare.9" } ] }