{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5ea14dce-3e94-50b8-ac36-83be9dc3823c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4", "version": "6.0.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:53264af3-1f63-5371-8015-0f8f7eb90274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5143bc33-eaf5-5753-a3d7-a5a6c19cfc02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7019c3c0-7da3-54ca-9283-6832dfda00fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0c9d60e7-a00d-5b05-8195-50ba368f4f52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:68fa3e4e-9d19-5fee-b7a2-01a2826c100c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:3b48d63b-ed6a-5274-8b14-a29c7d1b135d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4e34b363-25e0-57d8-9283-4518233cff85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:be5b00b3-a64f-5e44-94ea-f263a6c72482", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:59d55154-9a00-5383-867a-30ad58db6ac3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4d5c819b-4b44-5783-bf44-3b2f09d969cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:082d4988-4915-566d-a0eb-eec75ecd9138", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e9450f8a-5205-563f-96c4-6818566f09bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9910b344-43a9-5259-ba67-51a82866faaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:89b83b15-49c8-5574-84a2-a78a5bcbddc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6133bc6f-1b8c-519d-ad2d-bf4978778bb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2d87d0fe-6be2-5aea-9792-4bd64d83b60c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4032f1d5-148b-59d3-aaf0-92375cdec666", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:cfdbcb88-538f-5e49-9698-6e6600df5769", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:321e0e2c-c660-5c66-b7e9-8307ec351768", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:edeeacdf-144e-552f-918e-cbe6d7ea589f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e738aeab-a99a-5a98-95a8-eee9314b93fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8771b764-4247-57f5-a08c-8d5e0edbe915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:465e69dd-0ac9-53d3-9e33-0982e3cd9242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:384416bf-f55a-50ba-9bb7-230c229a5e4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:027c5cca-3a4f-5b9d-a703-4671264e3e7d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9a5f3078-7a61-5876-8585-e311b60a5fd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:44c061c9-6e84-5323-a4c3-9e700b44bd6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c5a284e6-767d-5ae0-b411-a5c3709abac6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b680d739-2c8f-56ac-b7eb-f9e4ce6ea064", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:62f2e0cc-5d81-5773-bd72-4b34561a8402", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6d4312ee-4b3e-5deb-81cb-2cf0fc8fa068", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:650804f6-d09c-5137-baab-51619cb72731", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:581f7b0b-53f9-5bf1-91ed-542df066cef6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a1703e4f-70a5-5ce8-a37a-079ba8d80de0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:485badf5-08f5-54ff-a766-e013424d3b3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:82012144-983c-5600-91b4-6f488edafe6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1534bad3-0840-5e9c-9757-41fa28042d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4f669f49-3a10-5e95-a6f1-c46220d4612e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a2608888-ec5c-513e-b1ba-e7073759f9ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7cf1810d-edde-5122-bb52-607b8e8a32c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ddba1f81-ffd8-5c8c-a1f3-fc222a7b41b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6d238667-5277-553a-a7c2-fb34aa8b7c4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:435682fc-e962-530d-95fa-4599269b7082", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1971d1e7-b183-594d-b32f-e3ec5b75b43c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e36a1fd9-2368-5fab-83f0-f9e34a8363a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9bcf0163-d42e-596e-b607-f47fd4b844ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:49fbe4f1-86d7-5b67-905c-aaec22812f2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a673e5cf-0296-59a3-bbe8-af2aa734a875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.0.0-tuxcare.4" } ] }