{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c76e61fc-620a-5707-999a-6ede461ca011", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:413de7ba-4b69-5403-9a12-5b557e6e9906", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-tx. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:49908d86-0e86-53bb-a6da-f582024a3b41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0b1b489a-9e83-5a75-912d-d6292089e175", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:edca05ac-6096-5926-93ff-5551ce903d64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f61e080f-916a-5cdb-a5f2-c0862362b2fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fe552f8f-21a9-53c7-9c72-d0e92d1315b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f4eb5596-91f4-5b6f-a6d2-06d3f164ec22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0272ad1c-5fbe-50f2-91c4-733ef0dc6b43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9a640296-545a-57c9-b743-8a85c97332f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4c55781e-b9ce-5610-8e37-eb97951ec301", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:65a6a840-195a-5ae3-b12f-774f8895aac6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f5621247-1ada-568c-95fa-ca07b8d3e530", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a109f130-7aaf-57fd-afdf-35a8458aab92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bd3d1b69-9413-5dca-b46e-077de76a72ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7a3bc0fd-164b-5543-aaf8-2f964c0b3b13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:97e50d9b-b7bd-5d13-bb26-4921e04b2321", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:cc671569-3de0-5150-b2d4-a188eb0be790", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1453934d-cc69-5d05-bec9-0d4ff216ce4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5a976c2c-bbfb-5464-af87-fe273183fba0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fa4268da-90fb-5f25-bf5f-5eec967e5bc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a9db1c78-0a8e-51bf-a602-c2989ab9815c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:95ede627-c881-5d8f-a256-f3a341ff2652", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:34c1d0f6-e126-55a0-9125-f9983631048f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0797c5f7-0b95-5951-b32e-0dcc2b5529df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:12e33a9f-7eed-5436-98be-2c6374873b48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4ca2d5fc-8eff-57ed-bec9-03fd91256cce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5bbad629-1793-52c4-9382-6cc2802c5b1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b400f982-0288-59af-af0f-55bb69bfeb7b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bd240398-d3d3-568b-a480-04b9cd0e1cba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:466ff25c-6d0d-5c98-91f2-2091e7375b84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3c02bbce-5b13-5b50-b3a8-00d592b9e494", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:53c1ba56-0474-54e6-8317-1665989fa5ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9766db11-d938-558f-8737-e3c6b46c6ad0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:88efc885-6c51-55dc-95c6-52c350800fde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:86054ce2-0c5f-51d9-8351-aa1d378f6c26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ad733f7e-6816-5cac-8190-4156ee9533c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:42b8d6e6-1958-5346-b594-304949d9c3e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6eb7867e-df73-566e-937d-bc8a306beba2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ceeca309-ee5b-5dc5-8235-9bd5b9ab9cdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:67875c21-7b0e-5270-beae-779c0186ae4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.20-tuxcare.11" } ] }