{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7283daaf-2b82-5bf1-9671-e23892ad35ed", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jdbc", "purl": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f8ebda48-6943-5eed-aa40-71d7ffb4aeb0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:18806b8e-4a1e-54f4-954f-dc725da878d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:00da2198-4e64-5c29-9623-c11671609d11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4f6b60e6-6917-508d-b43b-23caf8cb3cc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c63a03e9-0c40-5188-aecb-962af51f1dcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e1b81918-ed95-59cc-9940-22441d3f570f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0930c0e8-aebd-5c8e-8c02-b3bcf69b225e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f9b0abc0-3c80-5348-98b3-86c23574d522", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:44553255-1401-5787-8f67-f795b30f87ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e6bf62c5-474b-5fe2-8cfa-e6823e6edc7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d3f1d7ae-c319-5c98-abf3-588b53feb09c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:eca6fc55-a68c-59cc-a3ac-691ae81a5591", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c75b7f1b-199c-5e4b-87f3-c8cc222e4f3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0db6e383-5dd0-52c9-85a9-074f9faf1f8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e95b6af6-fdd2-515c-9ee1-5c9850fbd7a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8bdd8213-cd6c-526c-b9d7-5b8f37269c5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5e32d187-3532-5323-aaa8-39973b0636e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5afe731d-226a-52de-b9d0-5a84f7238cd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:57fa363c-8c38-5eeb-a888-2f01899ca1e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d4998857-3e15-5b04-bf70-18377b8fdfe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6b9b4d07-80e6-5341-967a-eaae180ecbc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9ae71227-f09b-599e-95aa-663b1516c13d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7d0be9ef-302d-525c-9fb0-332822dd42a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b14aff7e-8821-568a-85e5-727bdbcf8eee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:afc9cf13-0847-5468-b968-b7d56ddaaac9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9b818f0f-8d64-5189-a7eb-d27279f2198e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1779baf6-0b7d-5e17-9ac7-55046f7fa496", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5780e682-55c5-5f6a-b309-9eccaf8f7094", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ebb26a53-827f-53b5-9d17-331b7436a3a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:35781d31-88db-5e0a-801e-35ec5f13c5f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:891f1da8-b2f2-511b-9020-53563cb1ef41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a5eed780-7ec6-5cfb-8ba6-baf3e6e4bfb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:88b51ecf-ddbe-5558-8bb0-82a2af23caee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:eeb059c1-303b-5876-864b-a677f50990d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bb29da2a-f786-51ea-b985-47fa0e389976", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d347be46-6736-55a0-a60a-8fa0bcd6d0b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7b9759e6-b68c-5aaf-afd7-37d5348701ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fbea5a31-57a1-522f-bdf6-7aae3d5d4fe4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:48270ac4-32a1-55ef-8610-a23a6885c23b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9f85abb6-6314-5977-963f-1f1a09e2d1c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jdbc@6.1.20-tuxcare.11" } ] }