{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f4d80c47-5bd9-5d02-94bb-057b2fe746b7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-webmvc", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:251a6809-0462-57cf-8ada-97fb2b757b09", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6272fbf9-75d9-5d2d-966d-76e29305029f", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f652f3d1-6a12-5819-92be-e8280f818498", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:933ba124-c551-5297-a13a-967331bcdade", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ada23fe7-833a-550a-95e6-00256ea0eae3", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8814cfd2-42c8-555a-8f77-2e3bfd79e641", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:24bd7bb3-6348-5bfb-bc3b-455288344dd1", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:44b5ced4-8975-5d12-aea5-7f1deaaff1ac", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fdd1888e-9bc1-56b4-a96b-8c5ebc2c3d1a", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9c248b02-bea4-5549-b07f-2b482dc220e2", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e2693ccd-2ab1-5f8b-a36c-89a42c587412", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fa0c6af5-339f-5b6c-8b26-354058381ea7", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d676fdc9-6e1d-598d-8cae-a3b511b28917", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ae2d7207-1f99-5d3e-b14a-8fc314c88a8b", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:64055181-ff37-5373-9de7-3e04636c2630", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5d453474-1ba4-5c1c-9530-e510c08a62d3", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d14db678-bd43-5ec4-bf42-b1b4c0edde0a", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b693e515-ce03-594f-b1b1-1bcc50e9ab50", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:48b0e24c-51b6-5ea0-abba-1e83adeecd80", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:63e9d472-3109-5cbb-a345-820673fb5e34", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4773cbac-3645-5111-ae5b-aaf79e68a3d1", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7a82592e-f146-5151-b5b2-e1ad7dab96dc", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bb79113a-bd35-5645-b894-09e151107fd0", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4fadf6d1-6f02-53af-91aa-a91b50581d47", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8299f543-db89-5eb8-9236-c734b1a5d2e5", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5557ce38-6d28-5268-8da8-8e7c844560c8", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:58334528-5541-51e4-9487-8d32f0f2a827", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2727b497-4f27-56f4-a13f-c0aff4467a20", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:194f1f8a-0308-547b-8362-674d32b9b351", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:3b032c93-1aa4-545a-9f5d-2febf6a73664", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:618330f4-4531-5b65-9ee7-f4e5379c714b", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6ad0338d-e28f-55a9-91e2-444e96d574e8", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fca69ccf-6d23-5b57-a00d-134aa3dad249", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fcdcaf81-64c7-5fc1-ae50-b68f474a786b", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:574c5972-8578-5fb3-9066-228e3b8f44b4", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c1162a15-5b69-5202-b7cc-0667dcb5de70", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a2327a0f-2e42-574e-800d-de34160cb2b4", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:21be5e46-d7ca-583d-a6e3-a0461816df30", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5e5abe66-d4f8-5df7-9cf3-03629e78a155", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6788fa13-1b7c-5b1f-9306-2b0fa4b31897", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-webmvc." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.20-tuxcare.9" } ] }