{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:35434fbc-284c-5df5-adfd-dd8660478d81", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-webflux", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3ffff35d-9a7a-573e-8002-04fbe4f4d68d", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-webflux. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6ac8b01f-f622-549f-ac4d-891ee6d00f80", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:276a32c1-3592-52a4-bc55-661bd2a8bab4", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d69107ef-b816-5f51-a0b6-18bedf6a3cde", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4f34a9d2-659a-5f61-a617-94760a50b2e6", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c8afe2ac-ef9f-5de4-9144-b4f0cd34bf95", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a0c7681f-adcf-5da7-8485-24499214d3e5", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:30c53d8c-ad5c-55c5-882d-6ef7b700369d", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:da19c2d8-e525-5231-9054-68da777fda19", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e6d6c2a9-b2d9-5ae4-a46d-76fd8cb1bf36", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f4738128-2d8f-5435-a6f8-74f527baee44", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:23d1e030-c651-5915-821f-0c30294ac30d", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:25b8b911-b499-5370-9855-633ce1255268", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:dbf63b82-96af-5ad8-9be4-7f0da1e2b79a", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e283970b-3899-576b-8844-146e9f37f07e", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a28cd056-ade8-56c7-a17f-389541804ae7", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5a4d1b9e-41e5-51bf-8c2f-77889547992f", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0cf6d2bf-e874-5f7e-907f-170d5ad4ab87", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:00b5378e-911a-557e-8114-9def59d70911", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:82089a8b-2fd8-5170-81d9-bc923eef0e09", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cc914385-9d10-58bb-9610-2abf8489ddd3", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:186e2455-1f16-5289-943d-645b2b299c4f", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:50077896-0a43-5f6d-a9ed-91f5c57b2114", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:59be2b61-bd33-5e28-9be3-22a6bcde4b5e", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:339ea633-eb40-5dbf-8ea7-24dafe90bf7a", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e51306ea-7453-553f-a582-545f0c2c63b1", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:afc741aa-e07a-570e-8faa-a501bfd788d0", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9e7c0b9e-de68-5b89-a0dd-be0d61e1dfe5", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6bc27c2b-0542-506f-8047-3382dc8fd6f2", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a0e9150e-528a-5b73-a4f7-1d49742c11a6", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a44287b7-7378-5001-8826-cb9e4e920b6d", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d5fc9e54-9e73-5f35-86af-8d8b79cac9d2", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:332bb9e1-5534-5adc-a4ad-d60f2fbec161", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:91605040-d231-577f-896a-73de954aa3de", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3e450fa0-c308-5af2-b943-c4110e058a66", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7bdd9fdd-41c3-5d1f-ba2a-97bd34beae88", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:68f90626-e544-583f-b2e2-89bb784b4280", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7f87c661-520a-5ac0-b753-e2a5333aa2af", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:38c52075-0f30-5c24-9885-dec0c4d5ea2c", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:550733cf-a861-581f-97e1-d4f0d42fd866", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webflux." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.9" } ] }