{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e628ad21-1c3d-516f-af79-0b64767d13fb", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ceee20a7-2cd2-5266-b054-2da798d8ba08", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-jcl. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e3e39b53-06cd-57bf-a677-f9b615b41e2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e04e299e-ba5a-5df6-9263-57326ddc5b37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d00c7ec3-8430-51f7-8539-dfbdf9481de9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b26e58b5-485f-5333-a81f-1304c34035fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c6767451-9696-57d5-a2bb-a783d2b93faa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ee4ac212-88b0-5daa-833f-8de501c39a28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fc6e7c9f-2bbe-575f-be4e-c18faa71a7ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3190fabb-967d-5568-a3eb-4edfc1875cc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:23a12cdf-8324-5dfa-9c6a-1f9903b4f2ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3eceaa36-0804-5ae5-ac06-520f6793152a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e952839a-0002-5ac8-ac12-11a66e025881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:49fccb7c-112b-5e00-a1df-76a9c41a4714", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:be43697c-acd0-5553-b6e9-f9012a8e8c04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:40e9f3a0-f2f0-5262-8cd5-68c4b345df1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:68ff2025-9572-5b4b-ac38-324acb59bf36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c91eab2a-53e4-55ec-9d98-359f90735bff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3e14b38c-d1ef-58e2-9fab-d32fc5b1bd2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1803b566-4a2a-546b-8012-6166acd25e0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4562310a-ef75-588a-b2cb-ea586c21dab2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1f963546-6979-595a-a7d4-dab03db26234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5f85438e-c2b3-5d4f-abb1-f11552fbf3ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8f0e71a7-3b14-5c94-b3f0-ccd66c9ec593", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:381c8f74-5fd9-5cee-ac1c-60f354c4d031", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1532fc90-8d0c-5de3-a825-c8aabaed9358", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:cb887e32-5654-5a93-90bd-2b6e8282b311", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3338a487-181b-50b7-abba-0517bd82122d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:05cde651-f5bd-5ca1-91cb-b5c398b37916", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:03f106e7-e384-5fc5-9ceb-21bc48a95bca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f7edf699-fd1f-596f-8ffb-1a760329c791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e7b1d3a4-641a-53fa-86e5-611e0bde5da5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:028ae8b0-0cde-5997-8dcb-197720998535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e0fa79e9-06d8-5cd5-a464-27458f082447", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:42fc94a8-0cba-5bbf-911b-01d2881baf97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:82320c27-e747-5941-ac9b-175a7c7bbed5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:dbea591a-cc17-5a5b-9465-8092f3127c56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f5692e9c-3ca4-5ac1-9348-71071c9e3b4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9ec100b1-cf14-5943-a536-b500c8b61e4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c17583eb-3e0c-5ce7-8104-cef90457efe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0e4de532-162a-59de-bcdc-cfae2b036dce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.1.20-tuxcare.11" } ] }