{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e8e75b60-a79f-5556-bf94-092a42fb4724", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4c6b18ce-c8e9-532b-952c-aaa9fb56bc38", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-context. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1927efd1-76d9-54f3-99b1-5f341d9ac03f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7bdc11d1-b7b5-5575-944f-00b038deb8da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5c1591f5-d555-53b4-9652-93f98f67ccc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:23403e79-72ce-5773-9468-a6cf532263e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a40a44fc-1897-5246-bb51-600d285e63ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e598c58c-0619-51d4-a6f8-68f5119007a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ba1fe489-e5a6-5467-907c-de51776a3d79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:da7381b1-b978-58e7-8ca0-9255e9e478d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fe4ebf94-a1e6-5855-a4ad-2ef197842dfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:26e27cd3-c734-5486-9607-c149098c5681", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e033046b-7a3f-554b-995e-6e0b87fdc422", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c4cf23f7-f75c-5a9f-9cab-2232303c1aa5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:796a793c-b636-575c-a4d0-69db55224708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ffb63e66-d9e4-5a6f-bbae-071208895068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:01586fc6-4357-5c9e-b876-8081474491c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ce4bdb9c-7454-5fad-8329-8b0a7d880e02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9a0fa905-452b-5122-b838-b6a2c8e6f118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:027f5060-9e5e-51a9-a744-efbd7867bf33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:dc159747-1fd5-58a5-987e-d742e8023619", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:db2e4b75-7c09-57ac-b909-d78a6a450ad6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ef492121-2ae6-57bd-81ed-e12d4cb6dd60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fe7d7701-d7e3-5c99-ae73-171a75a4ea01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:20b02b85-a487-5a74-b438-59a433298f11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fbab3b88-adc5-59eb-8f02-60d7f2453bbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0c92fea2-9240-5dba-a2be-41ca505a0e1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6d4f1e26-51c1-5933-8e19-0922ed47c63f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ef9b7614-b1f5-5279-9f09-2cbed1629c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:275942af-24ad-5390-bd7b-e3120d7ff64c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f88cc37b-d1bd-5847-a7f1-f2999278a4ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6fa37e95-d267-5a5f-befa-c3df03ae957e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1d7275d4-5d49-5503-83bc-cb51825daaec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:82074635-54d3-52ef-83c5-e7fbead6b7ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:284befe2-6cb7-52d1-aa55-b3980e66c488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b55bea90-7dfc-5019-8d18-9e118238c901", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fe7802ae-ac83-5b07-a981-054376183da2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6bb7b07c-5957-54e6-9253-e2f05fe010c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:711e4efa-17a8-5da4-8917-536718be9f15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c8363829-2ace-5e15-9f6c-90d73bba0885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9bf41465-026b-52ee-8b06-50afca18863e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.20-tuxcare.11" } ] }