{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cb172cc3-7e2a-5528-87eb-8784f88cf101", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2", "version": "6.2.5-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:dcdd9383-43fc-52e7-9ee5-4e6490347a84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:dceb696f-28a9-5fb5-a88d-be18d8e8fd34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:58c55196-4a0f-5bc3-8704-8eb5f4b933da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:c61132be-f7de-5c68-a877-a125711905b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:5eb9987e-eac9-598b-995a-fc0de2b9e5b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d13cdc2a-b55a-57f2-ba9d-303d0e414ca9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:ddedf85f-f97c-5b2c-a842-e3745e9c2f7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:372f19c2-2c29-5064-88d0-eff7e92c2748", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e2c9d747-6212-5cc4-be88-f45efa60d79b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:097fe275-cc1f-5a7e-8cf1-5dd90cf5d437", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d010c12f-4003-58df-96c1-fadf27a39c85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:9d7c26a9-1a35-5e53-a9bb-84a5c9f58d16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:18730c96-8b19-5f9d-a5df-6d89e46b6166", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:014966da-ac41-5e9f-aeba-5e7a76d721db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:67dca55c-44a2-5722-994b-2fab0c5a138d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:10123279-58e8-5e0c-bb3d-7a4a2848cc52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2bb3ea09-d32e-5ca6-aca3-181f52eacd19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:024927dd-4657-509a-8b9b-a353377b2c8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:316c871d-9f0e-5346-be82-6d25bfd279b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:740a76ce-183a-54b4-8447-93a6020c5ff5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:79c7c0f1-a545-5bfe-ba6d-5cacda92a733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e96c9474-49d8-512c-a8a8-26c240aff609", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:558dc251-a171-5b38-b773-7c44c429e250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:8f158d3e-4fb6-557a-8792-125054d402f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f444bf88-a0a1-5ff4-8d0d-1c4a3fb06e0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:73b7ce70-c9d6-5b6a-9f63-8b3edecf5c20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1f7c0876-bee2-521d-be3f-86303ef688b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:396702f3-6577-5747-bf5d-18435db42820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:b1025199-03f0-5111-9a29-c2ea033bf29e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:26fc1992-3cc7-5c58-8d1c-0cc5bf5a694a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:4d488e69-c8a4-5e31-8e53-3b169239afea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:ce9842a0-61bd-5a90-9497-57704873044a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:5cdcdefa-411e-5535-a61b-c040111e8a70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d62aef46-d08c-58f6-91b7-31009ea0ba8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:18612c7a-078e-5280-894a-38cf3bd8c54c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:45327736-86e7-54a4-a489-692acff7cf64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:5ca547f9-c0bc-5fb7-accd-9e502d123aa3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:676e8714-924d-59d4-894f-7e2ffd218990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:582d5b24-4beb-5f24-b33a-3871189b2e4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:280a7e50-3a4a-5710-bfc7-2f24ea5c199f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d7abc4a3-8012-524c-884b-30911ff091c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d928bb54-ba89-5afc-b439-5ab60f51e6e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d3c7851c-0025-53cb-a74b-cbb119889fa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-webflux." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.2" } ] }