{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ca1f74a5-6c3f-5930-996d-7699acbd45ba", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9", "version": "6.0.16-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:60b02bf1-fcad-5b3d-b95c-9ac45a4cb602", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:2e64f154-9bf8-5d80-99a9-675a0ae62072", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:619314e8-a256-57a0-9e19-fdd6eeb1f265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:f1e7387c-8869-5e59-9bef-8694fce6feba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9a6880fb-5bb6-50a8-a868-91652ce8efe5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:b62b3d90-9d29-5c92-a487-5752ad80ae1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:3666f7b0-4c9f-55f4-a664-217e5e120569", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:16009210-2d02-5d2a-929c-2a8241dd5a6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:8a7af853-e40a-565b-a3f5-322998987d8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9ac28b6e-428c-5d24-9e17-301c43b61330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:0c886634-ed61-51ef-84ec-e92e6dd02fc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:baba993d-e25f-586f-b953-05e89e8771e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:cd7c53b4-5d32-5a83-9f5b-558767029875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:c954bfb0-2e63-5387-ae37-60a0ec7b9fbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:2716fd80-adf4-5886-81ac-8ea1b35674b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:3e2e3b51-02d8-5a9a-b5f5-da2d9f960829", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:6478d007-a819-5e7a-96c1-fb362bf512e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:fb62b2ad-3da7-5a0b-8486-26e47d22f2bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:a0d0db19-9281-56c4-9d3c-479ebc3c25db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:1eac4fa1-3421-50b8-903c-9cb646112f11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:366885dd-fddb-56f7-b7b6-6ca00024fb8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9796e9c8-f68d-559f-9cc4-6207918e381b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:7479489e-3bdd-59b3-a9e7-3f8f14659ec8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:79e272b9-82d7-5fd5-827f-502e1d4f82e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:ccef1f79-5541-557e-a936-cc34aeab7b38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:0cc440dd-85ac-5d7e-88a3-ea7e68d0fb8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:db9775ce-0508-516a-b77b-0f353d79921d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:fbd26b9c-9c37-59d6-8517-2ef985ebe71d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9c138934-01b8-50f1-bfc7-b307f0f5b4f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:d962a6ee-7c00-5164-8ca1-43d67368bbd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:58f4d2a6-b494-508e-99e6-18b3e344276a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:4f9171e5-0f4a-5c5a-b63c-a2a4e4c99803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:35511a6d-2780-5d92-86a5-cd99aca95caf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:554e4965-3e49-558e-b932-d206b2c0a078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:b292689e-be24-5837-8dc4-37b2521f3012", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:c36a6e23-c991-5927-b878-42a97427d64f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:a62e420d-13ea-5721-bc2a-66064d4064de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:b1f214f6-96ed-5017-86fc-9c2435b469ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:8e52b03c-f4bf-5039-8d82-04982c70737f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:fb85cdae-2547-55c0-976f-864d0621b81f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:77629430-539e-5efb-89fd-ffaed7379db6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:7dc43fd9-8793-5821-bb59-c26d3121a473", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:dabd8005-16af-52c1-a19e-039a684850b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:5ede2deb-baea-5f1a-b6cf-6c3ab6520804", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9b4068e5-0bd3-5bb1-a5e8-026563240f24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:163724dc-5d6d-5390-82a4-5b9923474852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.16-tuxcare.9" } ] }