{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4aa454f4-20f4-5053-955b-9c98d9b9545e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "6.1.20-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7ef253f8-1a6a-57f2-8031-854c81c3b1cd", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.4 of org.springframework:spring-tx. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f6b70672-97aa-5f75-b567-65e587af5aae", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f3a2fac-d98c-50c7-9992-6ffd523a6b40", "id": "CVE-2025-41242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fe53d767-5d2d-5772-b877-8fbed0b52bc1", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7269fa88-d30f-51b2-8b40-08cab17e85e6", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:361656da-62d4-5369-82c2-3ffed6159d63", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5361d86f-bd0a-5b2e-9c9b-3664a9e4bc4f", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ab7831ea-97fa-55fd-80b3-4e42dc3e1509", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:34fe52d6-9ad9-53c5-80f4-65c69ba3f334", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e7472cf5-4cbe-59f7-b261-114c0958ac5b", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:850eb026-5cfe-50c8-b398-acd21b38ee90", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:921285d4-474f-52bf-affb-7d67df0a3134", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f05f665b-cc93-5aec-8846-a41e60156dea", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9185853a-dd45-5246-bbc1-56d8882e78e4", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f77b8849-a0d0-5510-bed7-e8e7d954ddd5", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:84d0d122-b4c6-5ab8-a0e7-86757690182d", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b14ee243-edd1-5300-bef9-6df6605caf34", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:be20296c-d686-5916-9558-c5719055d34a", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b88e9fac-8f33-5ed3-8de2-1e1128d9c07a", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:34080456-fe3d-5957-bb39-0687a4bb71e1", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9cea30f3-dddb-54cf-9f5b-f450b60b7773", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ed703ea8-2d83-5e55-a925-98ca4d53aa4f", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9e7023cb-da95-550c-b39e-a84f71be3e16", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a33bab32-1269-5d23-bf27-cdf230b9a42a", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a8cde2d9-a22d-5338-848c-0ba768de6171", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d7df17a9-9c3d-5b0c-9f21-cec8d92dc8f7", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eb8fb63e-deb6-50c2-8764-e1aa8b662ae1", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e13bc2a5-990f-5a88-a574-1ed751ef733a", "id": "CVE-2026-47885", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:87b88e3e-daa4-534a-acfc-1083a2a2d829", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c343cbd4-24be-54cd-9af0-9fbf646846a5", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:27c9c4b9-d988-5395-861b-bcfe8287f00e", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4dd61a9f-9c33-530f-a553-8d69d6d71dde", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7de99af8-24f1-52e0-9cca-db134595d9e6", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:93bef682-b093-5187-a1e1-d3ed640a6404", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f22476e7-8712-5b22-be71-16ffb3274494", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c0ec1306-6be0-56aa-84c3-50e5c15aba37", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c634484d-c971-54a3-add4-88d1ebc7a91a", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3737c87b-c6c9-51ac-8e22-4f84227525dc", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7019194c-1bd5-53c0-a6a4-e24617eb4470", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3dd129f7-3896-51ba-b284-ae4704264961", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.20-tuxcare.4 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.4" } ] }