{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:88d09eea-2504-5298-bfc4-3a6e236f37cf", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6", "version": "6.2.1-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@6.2.1", "type": "library", "group": "org.springframework", "version": "6.2.1" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8b40226b-cd8d-5f0f-a356-ffe780e0a974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3acdccdb-e303-564a-9b6c-29a47d2b2275", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:0fbc1968-43e4-5a3f-a6f2-0156b85c0ac2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:86038c1c-9ce4-54d1-ba0b-567bb94770db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8b23bf26-a549-5d00-895c-2b3fbb6bba26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1162eabe-f5e8-512a-89cf-7e904ffbff11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:735ab8c9-3147-565b-aea8-06b7c3c3ca91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:86399957-ead6-5e2d-b3f8-a335cf9ee32d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:79bab3c3-88a5-515c-b3aa-1c6cc2d4e786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ebc18c2f-cfa9-5db5-88f4-8bef37d6f39b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:33bc5aef-9825-5151-84c7-1787d0e877a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e24e3db1-f8d3-563c-a24f-fde16208f26e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:67109d54-f947-5c7d-ae06-db2641afb06b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f230ffbc-0005-5298-9a14-8889c79286c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:67a48247-ee80-5ddd-b704-cc5441297b74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:5273674f-75dd-5143-9f5d-2a6fdba98c1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:be773b41-f335-507c-bc3e-7777692fa5fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:db149dfb-60e4-5b6e-9bf2-565f000309aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3abf418f-29cf-5fcd-b01c-f40b67c313e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d26e607a-0e42-5d96-b6d7-185f8c1859d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:738be0bc-e33f-57c5-ac2f-25d65c4b1573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:53ca27d0-9113-56f1-82c2-6b8f3e6b5170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f08d4228-83fb-52bc-927d-9197af353c37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f64c7af5-ad3e-55bc-b8a9-0ab886a313e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:07d92e8f-2399-54ac-a561-ec6144209265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:deb731fb-96f6-5934-b64c-2ea607f0ca66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d098586f-fd2b-5785-a275-98addf240d81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:38f9d578-5c8c-530d-aebf-b1fec873846d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d9513a83-7df6-540e-8016-c3c282674d7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:76740e8d-2ed2-56a0-b7c6-712c9a540128", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:50894b3f-7201-58c6-ae36-c9f54240e883", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:681b47ab-35e6-53b0-b9c5-5659e2346655", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:012d8bdf-c132-5665-bf34-96a25819b189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9cd86507-7cb7-5fec-b2d2-507daa381bdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ddc31254-8580-55f9-a51a-ea88e51246a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3bc95e15-b106-5f8d-b4e6-fd127bc22a7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6031dc64-f6fe-5a31-b785-ffe4c0f72a53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ac781b3a-94e4-51bc-ae8a-adace5d09d70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:55c9cb81-efbc-5e50-a2fa-ad9d5ddb7e50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:da57d68c-2d80-59ec-9237-b6e9795290ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6b423015-5a4b-5b1c-9b2a-50fec2882745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:954b6690-2154-5326-85b3-9207f1211a49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:326347f0-2f5a-5125-805e-6f282af5f868", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.2.1-tuxcare.6" } ] }