{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7eb87ae1-a075-57c2-8589-33352e5919c1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:92c9972d-c0c9-51f9-a6f0-e64c94759e11", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-beans. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b466beb3-1fd9-5fbc-a9d1-9977bfb122de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bba31b03-9907-59ef-99ff-c14eeee81895", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:44be9d91-74f8-557d-94bf-06e5d30b7de4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:123ef747-e1d7-52c7-ae3c-07ce2451a1ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8a82def9-042d-530b-be71-e2331c31e0a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:05a977c1-56fe-5538-a761-87f09b1d0161", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:323ea55f-4313-5ecb-b8b7-4a20528aa8c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0eb64bf2-19cc-5690-b417-4d33f688fd3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:10892b44-99d9-5489-9d81-b3e1c82e44b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7078fba7-08ff-5758-92d8-82c77f5fa257", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:16928b18-39b2-5d77-a349-99ddb9aa8f89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:2edb8be7-b7cb-50fe-9f83-588e40d2e77a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fb91fc33-049c-5a89-af28-2969cac6dfe2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7064fddf-367c-5deb-b0f7-ac1f14002dfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5d1a54e6-6a16-5674-81e0-ff1824382a88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:61c68d4d-974d-592d-bbdc-c08b6f9373ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bec9e163-c0ed-5a38-8cca-1d4faee877f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d570f169-af22-537a-8ba1-76b181c37dca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bb499406-b908-5257-9ee0-10c82f316e3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:016fa4d7-4a58-5e61-80fb-a556c5428479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1a495532-8124-51f3-af4f-926b26c3da18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:881a966c-9b67-5116-b785-028aeb8d9f56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6795cb95-6080-5a00-9968-2b669552891a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:56e1a821-4a3f-5ab9-8967-6ed990fe0e00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d4ec25e3-a1af-5b71-83a6-3a6b177775f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:40681323-02e1-5474-bcdc-dce8a5719471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:50b2c3e8-0404-5866-a6d1-a2290d912ae5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8bedd095-90aa-5fcc-913e-bc4b5880271e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:beb06897-c783-567b-bc6a-53f805f64fba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6cacd0ba-ba65-5096-997c-74385615a24e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b7d943d4-e2b3-5068-9e87-2ff43eb8fdac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6ad78130-1765-524b-b7a5-50f1b57b38bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0e7f2ff8-9642-5ada-a808-6cf75d4a86f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6dc642a0-11e4-51d3-ae03-1c4f9b0f63b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:26a2defe-6008-5a91-85c0-eee4529b2a16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:48f5f6ca-0d8b-5714-a060-654b252af265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ef1d387d-d716-5335-800d-87bd1a1db112", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:91e023c3-07c6-59ba-9b1c-0f7b64c4b400", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:858a3ab5-fe9c-58c8-b529-26a851f2da6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.1.20-tuxcare.11" } ] }