{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b3d8abc4-7f1d-56ba-82ee-aa53a229154e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-web", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:cedf6b0a-9566-5e46-a58d-bcc2ff66f545", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-web. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ceb38bf1-8925-5fc8-8ba8-9a8ab1c424b0", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:36ef79ec-feae-556c-9794-9afee4066a16", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3307f004-bcb9-50d3-97db-20e01d29e347", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a4fd6d55-6c78-5112-b440-7d666c476142", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:332f95af-f925-513d-8d7d-1c151274b609", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:335ecf4b-b908-5833-b3b0-f4811d135756", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d754bd4c-f9ab-5580-b539-fdd661ff5f88", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:151ccc94-b964-5e25-aa90-421f1d2b6c3b", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cc088567-3f64-5537-8dfa-b505304f5c7c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d7a6114a-5005-59bb-af48-710d2c9c221b", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:535aafc1-dd52-5e35-8124-7c29f42ac893", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:38ab5231-bd82-5bb7-b139-440e2c84f99a", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1bd76596-92d2-522e-9e09-6629f375b57f", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cba8cf0a-ebf1-57f9-9969-8f506e5d4ddd", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f2cf5fd1-478e-5da4-bd86-5055eb77449a", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:10cb648a-9e99-51d9-bc15-e9b59bf6df7a", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f43fe5d6-92c6-59fd-906f-546302925fdf", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:858ab490-2a3f-53a4-8907-d17917f8062d", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ea02d3e9-19d4-580d-bc88-b19b64d0c000", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:61e3e9b2-5eea-5d07-b503-f6b4f5365f04", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9d406093-6fe0-5a89-939c-e1d1fa54ac8e", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:81e969e8-7ad3-5a98-b2d9-c4a6a8fd4e89", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9dee77c0-f3f8-55d8-914d-bc7b415fc053", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0792f4cf-a99e-5f1b-ae34-5b1204e7d54b", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1aed59b7-b74e-593a-9282-661ecada16f8", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:caba5126-9449-5422-b027-bb1a4535726a", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:24dd429a-bc48-54da-ae20-f2cb2fb7f8e8", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:721e380c-b7af-5fb7-836e-41915f722331", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:116aef6d-39c9-5c38-ac24-a3183ca15a9a", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b182922a-fb75-5a6e-b0c1-8a27314129eb", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:172e2207-1feb-5111-bbd5-2ae3be1363d8", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b0e86d70-e001-530b-aca6-7e6da121414b", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4b05fa1d-a9a5-5c3e-bbf0-854228fdfaac", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fe7efe5c-9471-57e3-83d2-5e35abc6ab64", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9d8c22e1-41e2-5c28-b9c9-7d13862af40d", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5c47ee92-4424-5942-b82c-9ab5d9e9aef6", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c2eba0bc-f077-5a1f-a96c-bfc9418a831c", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0bf114fa-5327-50a6-9b7a-31c04be33520", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8084461d-16bf-5013-a39e-05f2e890b247", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-web." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.20-tuxcare.9" } ] }