{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c33f2c64-bfd0-5a23-a852-75b63bc5ceea", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-r2dbc", "purl": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1", "version": "6.0.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:72de908e-50eb-5f50-b6fc-6506a7cfbefa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7198d244-8974-58cd-82e0-3465461ef8a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e44b09b5-6806-5b46-ae51-9dfb7160912c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:fa0cc4d9-105b-51e2-9dd1-3a2b3e856dc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:dcbda3b7-33e8-5a4c-bd74-4434268c1c93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1241a0ce-f364-571a-9360-ad9df035ade3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9913491e-cf91-53f0-8839-ba0d7bd95c7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9e03327a-1b60-5fc1-8145-5fc5cb6a8e29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4d8734ec-0335-5de6-a728-a661b9de0b3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a4d2163e-e663-5298-8fcf-609a844979b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:21c795ce-01de-5728-afe0-8ee2ad2763a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6765b999-cc30-5e00-8dc7-634332015396", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7b440211-204f-5d39-adb0-c5d1561d2ce9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6263c1b0-065b-5ab4-ba25-8e3cdda04824", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0986a044-2b38-5f34-9375-9f4d0d691dbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:2a6ed30a-83a5-560e-bcc9-5375dcc14a62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3473186a-3987-5cff-8517-cf755710074f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:05be7b58-5517-5ca9-87ad-13f4a107a98c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:20b640d2-734d-5b82-8209-c2cf79634ba3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:df41a5f8-d945-5343-851b-60effff9697f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0949879a-55b0-5924-b12f-d4942b77ac54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0397e170-2275-57eb-bdb4-cbb1c793ad0c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:45b58108-a0ed-522d-b4ab-c422a93414d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e2bcc709-4292-5f13-b2fb-be5ed19a13c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8663b33f-556c-593f-b326-91bd059237c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1d33fa67-c6ec-5e45-b1f7-81260b67a36e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:540ae5a4-0ac0-562b-80fb-48530b3aca79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5e093041-b9bc-5cfa-afd6-57cce60f2b81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:22abc486-6ed3-5dae-a5a2-335d187bbafc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:086e031e-c1ea-5392-b988-d7d12c08b326", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:65065aa5-911a-56ed-aafc-28409073823c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e9ef9443-7d8c-5346-aa74-878f0f860802", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:33afb23b-f89d-51a2-8c86-d767d715779a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:2087e1cf-88c0-56cc-ad90-0ea1884772c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:02c0927b-9e7e-5e3c-8508-7ffa49900446", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6f398d3d-b719-5347-a277-c3925a7665d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:afcdbeff-95af-517a-ace4-2133eb7001e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:793aab25-cfe3-5920-8dc1-c3782aa27dc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1e1d25ad-d483-52de-92e8-debc5e7f0381", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f6022033-8c07-53fa-ba60-bc2856e58082", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d05deed3-9cf0-5a54-9fe7-398a6c0bc120", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:28a643cb-2cc2-509b-9aed-64e4d2622d74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b49f73aa-aef9-5861-8dda-f61dc4f22ffc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:77ecc440-0d8b-5a64-b1c9-daf908a3db6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9b7bcae5-62f6-59b1-a555-57259fd457d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7151dc76-5f1d-543f-b46f-a693375dbf59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-r2dbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-r2dbc@6.0.14-tuxcare.1" } ] }