{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:104f0f27-929e-5d3e-a9f8-5767a379d80a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6", "version": "6.2.1-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@6.2.1", "type": "library", "group": "org.springframework", "version": "6.2.1" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ec20075d-2eaf-5fee-8fd1-45ba9e9a49a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:bbe743b7-816a-5de8-bd43-f2dd2315497b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f60df413-2531-502b-921d-bd55c8753683", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4c67f836-224e-5ba7-8086-dfc27d07a957", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:5616c3de-fce0-59ae-b32a-d4eca762212a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:11f5198d-0035-578f-a4d5-7b78b9bfce28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c9cff665-7c76-55e7-999c-0d35701f08a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:07d759da-133d-51ac-a91f-afd82979bb5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:04ad8e69-2aea-5ed7-b193-362a9d1f8799", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:0de8d9bb-f7c5-50c0-a3a3-7740626ee839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1ea37b7b-779e-554a-9494-07044cb2759f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9519556e-a398-55c1-b252-4f39f633b93e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:68ec9594-6537-5514-9c98-f17fae529d0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e1f61520-6cd8-5484-afa0-c0af2fd32df0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d34e07d1-f531-5baa-a2e3-7a219da26f60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6fe414c4-e8e0-5a07-8429-4943f20b3378", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:0c667843-643d-5bdc-b071-8c0e759d3ab0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:53a20b46-d28c-5c5f-914c-68c37b38031b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:15773f8f-1abe-5123-8f21-d8131aee87b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d0108299-d8dd-5a24-9606-5006421ebaf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:12038ebe-bd73-598c-8fbe-51ae42c3287f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:01160a3a-a89c-5ccb-b335-624c78f40f5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7846c0fb-d47c-54ab-a43f-06ea126f912c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c3d29a8a-3955-5fb3-b733-6a6e9cdcba38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:963aaf0d-f09f-5bfb-95b6-ef364c47ee63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e0b1f6f8-fcd7-53d6-9e9a-25da8aa7b5c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4155396f-c900-5940-b7ae-fbf4e33b106c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d4428343-905f-5646-9935-ea2c13d32b62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:299e3605-3b8c-555e-bdff-35585b457ea1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9d84fe6c-120d-5d9b-bb9a-5d7c69f033cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:eea337bc-89d5-55aa-93b3-569da1ee471e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9162bba4-7698-54f6-af4a-8f3a5052648f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1d651909-fee8-5e24-bf11-7b2ece63f95f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8009d465-d90b-5031-abab-67ff1526d5cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4cdf6310-c5bc-5825-8324-0f5cad3204a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1c6e9157-0995-5c27-b504-d5eeedc92169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c80af86b-b472-50e4-a56d-90fd70d794cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:aaa3bfa9-8238-5703-b238-0040a81fc928", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3093be2e-a842-53b5-a4c4-f4a399ee2768", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ed18c9e3-b19d-54c9-83f6-7c185d235dee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d2ac7bab-d343-520f-b72c-df7619aaf9f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:38af9a4d-6a95-53fa-bfc5-c2d8bb4a84eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9cfc1668-ab3c-5360-86fa-249807c220ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-webflux." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.1-tuxcare.6" } ] }