{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8a94ae85-3c25-5853-b785-4c600f4e6418", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f9571aec-b8e2-5752-a357-c49ed5ce8e43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2e9130ab-0b41-5411-a690-f3b1f9b862fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8b279891-985c-5ed8-8884-deb0cc5a3dd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2045f35b-37d4-527e-8645-97407e95e292", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:834eff4f-9a0c-5ddc-ae20-d27ffc13c8ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:dc1f3538-81df-549b-9e9c-67f9752e8f2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:212245da-b2d1-5f61-9d6b-73dd40a13574", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:796fbd90-b888-5dd9-bad9-aca1c42544ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:785dfd6e-bbc8-565f-91ca-6ef43227ff1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e1646e1c-b6c0-5c58-ad9e-c5ce13ade312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7831e021-3513-5318-8fd4-1ce34912fbd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e4407aee-ed03-538b-b211-6daa6b02e1a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:38f7c2b4-caca-5ade-9bfc-48a7f7a9b337", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:cd28b408-f373-5af5-b962-e994d987896b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:037aa13d-f938-5469-99c6-7279bd166617", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:60b6fc23-4453-59cf-839b-93638c72d632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:32edbd1f-ee89-5ee0-ad72-a6b0760f0881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:35d34795-2666-5469-bd1c-99b301ba71f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:953758b0-f311-5888-9e52-6f52db64695c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:046c4697-236b-5ea1-94e6-c0aaf9012bed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a8168398-a30c-5311-b3c2-0118f45eceaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:0ad623e1-8160-50a7-8ad7-05523e281adb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-tx, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:36264807-403f-5b64-84ef-9efe4f53e157", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:caba1b5b-e3d1-519c-b883-4f40e38e41dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:cc3b25a6-2bbd-5767-8360-ad9e9612bac6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:818775ce-d1ca-55df-973d-6b758761e49b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:beaf03c0-53d8-52b5-b39d-e137bddd70f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:87523422-8fbe-54d5-903d-4ec747dfd77f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e7c3114d-eb51-53fe-9e26-f1b8e5ec1162", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6d15c73a-392d-522e-9d4e-a34e82336a4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ea6db895-5920-5309-935d-56f6a967e1da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8e85e999-6be1-539e-a33f-6e832dabe9fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:0f129c02-442c-5fbc-90c7-5e9900f5261f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:97a9bc1f-bdd6-5024-957a-cb532d63126b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:48705f8a-c213-59b9-8ebc-72c4593fb3a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:4dd84e90-8c74-56a4-9b7e-307d10b252c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7b2b74a1-2aff-5d9b-aed4-8cdd7d462512", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7d8c982f-632c-5c9b-917b-2e2381923996", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f18714ea-b494-551f-849d-a5ec9bab1502", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3e2e7335-76eb-5d05-8a7f-73a77f09099c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:24ac45b3-745b-5ca3-91d2-e1392478512e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c6919d72-c804-5318-9e22-1a0cd683f5a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7add227d-38e4-5915-8950-36fa5fdf159c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.2.3-tuxcare.2" } ] }