{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6d946ab4-868d-5806-b65e-2f2087ec6f0f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6", "type": "library", "group": "org.springframework.boot", "name": "spring-boot-antlib", "version": "2.4.6-tuxcare.6", "purl": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:7ea2eedf-2b09-5bcb-be73-d601dbfdb313", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b03e2d89-d226-5162-9502-7505fc658692", "id": "CVE-2023-20873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:3066f2a4-525a-509a-9282-9d6b2974cc98", "id": "CVE-2023-20883", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:faf1578a-3566-5785-99b7-107609ec066b", "id": "CVE-2023-34055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1db90cdc-4ac0-5a2a-9493-abcc1ff9349c", "id": "CVE-2023-38286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9bcada3e-cdf1-5042-9398-81dfe7a40e6f", "id": "CVE-2024-38807", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38807 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:2e9c80e9-c85d-577b-87d4-43042126f04c", "id": "CVE-2025-22235", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4ab5b5f3-8cf3-597b-aa93-1e7fc09fff5d", "id": "CVE-2026-22733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:adef6fe8-8140-56d9-bffa-18b8a2d9d52e", "id": "CVE-2026-40972", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cb82b87e-a0fc-5ec0-9169-5fdb773db1a3", "id": "CVE-2026-40973", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:62d4588f-1a1c-50ca-bb05-c23aa9b1c23e", "id": "CVE-2026-40974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:9e7b8e07-c022-52aa-a4d7-9ba327a466bb", "id": "CVE-2026-40975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0bc24a53-c26e-5812-b37c-274be6a77643", "id": "CVE-2026-40977", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7d28a928-9a18-531f-9c1c-9061898e1865", "id": "CVE-2026-40992", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:b0591432-0573-5642-971a-c8aebfc2f235", "id": "CVE-2026-41001", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.6 of org.springframework.boot:spring-boot-antlib." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-antlib@2.4.6-tuxcare.6" } ] }