{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:35ac3cb7-d246-59f9-bcf5-d7b9d778b3de", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-tx", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1c2cc090-1895-5e7c-a055-d21b45a0d8cf", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-tx. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:10b2463c-8616-509a-8474-15a3e3957f8f", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:13149e77-7e62-527f-ba51-d155a4257c7a", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:06b4cab7-d5ca-5599-a236-c6a952fe1644", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6dbd889d-e181-5a52-ad9d-33f255d85fcc", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:64441806-c236-5d54-b23f-1082d59e3a06", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fe9370f8-5c99-5e2c-88cc-7c78257a7656", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3887d7e0-a1fa-55da-a418-af1ad5585592", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:aa83f822-535a-56ca-bd2f-05f2c0338f66", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:efc6fb3b-44b2-5546-ad04-6e572a315633", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:89577cbd-8598-5bc8-893b-41971aa67bbf", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:59fa5e63-b874-5e86-befe-5a6b35c98f18", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cbc59633-06e4-55f8-969f-1e6e173d79e5", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:600ab2b4-50ca-5fca-b03a-3015e270c20b", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:051c4f50-1c58-5709-bad3-278229c5b632", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:141ce9ca-53a7-542b-a5f7-c64911cda86c", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0d0cd2e8-d775-5881-8cf4-1ccf616c5500", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4b55a527-9e00-56bb-90b0-a68e10fdd2c9", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:12610f1a-7c6b-5423-96a8-0e63b94dc0ad", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7f4e68fd-fb25-5864-a4d6-d4bfc749903d", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:37cddc21-fb6d-5480-abf0-fab762fa4c9c", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9002fb8b-4f28-52c8-bb15-d298fc688f99", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fd456439-0868-5655-bd70-aedd9bedbc9f", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bd860c25-5cbd-536e-b649-da7f01e8d653", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ff45bcaa-1402-5d07-87bd-04f51d9d883d", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1cb147f4-b14d-52bb-b168-3e12ff3c9f98", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2ecf3e06-dc27-5b9a-88ae-fdcd03984e98", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6d0a7f6d-8e15-5c86-b5a9-d5d29ece3c44", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:94da09a4-bcdb-53e9-a128-a79602309096", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:18d1e85d-26d4-5bb7-8a5a-8cc7754e0fbb", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d95191a0-9d96-50dc-816e-c7de4ec89d06", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7342ccd7-7b61-519b-bd41-7f58e0485185", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6e6fee20-2ac5-538b-b7d3-5082ae8ae395", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c6c4da27-65ac-50cc-806c-edc8a801eb9b", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ffb31368-a62c-5e5d-8cc2-770289d8776f", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3cfd1229-6bc8-588d-acc4-277f832da174", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:645e47b9-e69f-56cc-8003-285ee2833755", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d8d90a5c-a1d5-5e9c-a19d-04dc930aea15", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:82b26b16-f7ce-5cc3-b1f0-3cba2edee1cb", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2aded05e-93ab-58aa-bda3-095aef66a5b7", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-tx." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.9" } ] }