{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3a17a132-bd0a-5d98-8128-0c83bdaa685b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:301e35fd-02ce-5605-9442-be39805b9b9b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-webflux. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:54d8e5b1-f1c8-5065-a8ec-dec229809a78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:83e74a73-5938-51d4-b007-0cade0c40477", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:14585a41-c491-5d36-9481-2405426bb0ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b82571ff-2ab6-596a-accf-f4613a205c1a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8c69c75f-12fb-5f98-a3ca-f1fe8cb09a47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7f231fcc-d87a-564f-bab7-191dfd25a94d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3b31c400-b31f-531a-ae43-ee1095d65f5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c17570b8-822c-52a0-9491-532d7690701a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0f8f2e6f-b4f0-54a1-8004-551da5b4e8b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:24c27629-d535-5d14-bd90-ca463534760e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:477929cc-0d05-590f-85ff-0bc7fa0bbc66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e4cece68-b2a1-5539-b68b-4d62187ab7a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:67acc476-499f-54cd-bce8-3a968b9edf39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ee4c54a3-098a-5f31-9073-7f4b1d02f22e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9cfba98d-6d9f-57b6-9f65-06d6d43d4894", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0bec4b00-5265-5d13-86ba-bc6050967ee1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ea1f8a48-addd-5c62-8ba2-6d44bac1d2fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a01e6041-ee02-5f3d-bfe4-5b7da8ffffef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0629c80a-c228-5758-b7e2-6d61633f9a70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e0cba8fb-948a-53a2-8375-b93116b692ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:62b0e054-1715-508d-af45-469db2df9e63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:089be714-99a2-5f19-9458-a8d58097dcea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:854f07e7-4b84-52c1-80f1-94ee90203d25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:991b1616-fde4-5861-880f-acbe8383c49a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b0a280d9-8ffe-5a53-b4d0-2d43b403dc59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c29d3127-8c0b-5121-9947-17dc9bf7ace7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ca314eaa-3373-5fe2-a3f8-1621843ef45f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1dff472a-86df-5891-bd74-53a2efea3fce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6e621513-2bc7-5908-a04c-756d02df7980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:828980fa-346e-59e3-9fd1-ed627263b310", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b386e624-d2c7-519e-98f9-60f7f865378d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:cee4a1c4-635c-5438-91b9-404bcc9c94fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7edbec24-f9e5-5764-92d8-1eb0c0427844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bf8ea35f-a3b1-5f89-a4f2-fde551f65f65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:99dc4be1-eef9-5900-8a86-a08e1d1628ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:259c6a47-1f95-5fd8-b293-f0ebefbf153b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c54e4646-f902-59fc-a056-c0ccffdaff75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a55830a7-b04f-558c-9a8c-7d31abb3b105", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7475166a-6893-52f8-9c82-cb90bbf02df8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-webflux." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.20-tuxcare.11" } ] }