{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4018aada-412a-5f82-bbba-8c029ad7a777", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-orm", "purl": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6", "version": "6.1.4-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:4da3f609-76f2-5937-b8e3-eb77bea63e38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3619dfe0-d9f7-5f38-9eec-9c2536da621e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0f496ada-ed9c-5ac5-8a06-e5babcb2f80c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:56275ec3-26b6-53ef-9aab-75d52c9e82bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6b26e56b-19f1-5fad-9c62-84f5fce0dcf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f4cf5811-5a3b-5893-8406-fb61aa7aa7d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c7f7841d-a6c6-5238-85a8-7c15d17df002", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:316d7ab4-c3d9-5f4b-b47d-f151c42c6bf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:80dd3ecb-7bb4-5197-b11c-127aaa2a595c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:4c7d927f-61da-5fc8-97d3-3b3696fe2935", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9597088d-66d7-5ecb-a5bf-fdfdbe6031e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5946fc9d-92c5-5057-9e4f-5eb60f059d40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:76c24cdf-6734-5180-bf6f-22a658c54f12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:619233b5-41c7-56ac-9100-c3d1c131ab2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:014233d0-05b6-5254-89ec-56dbec6f4a7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5adaaa75-57a5-5737-bdb1-cd3882b1ca36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:694c8517-a81d-5f5a-88fe-c3b085c6c500", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:29df6ab2-4f98-5bca-9d50-31f6640d8f97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d1fdef18-71a3-5571-beb3-1ecd3ea87425", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:887b02ce-b834-5660-a19a-11ead51c6ee1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:7699770b-5e96-5195-8e69-738ebef18b6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:7afd9c30-a12d-5ed6-a7ea-8b581fb80758", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c994c7c5-44e2-5ece-ba5d-6392c7cc5763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6060d712-40b0-501f-8708-5156cc08ba35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:65bac07b-3f33-56e9-becb-f481208babc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6dd431be-879c-548d-a8eb-1c40c30bdf5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:62ad3a27-eda2-53f7-888e-6ac9a18c7e1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:777da040-ab4a-5c0a-bb86-86ebfe2e167a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1b3df25f-b922-5b51-9e19-e429fb3c787a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:416843fc-9a17-5c12-a13d-0c8df9e0eb0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d99b8c9e-3e8e-5b06-b7b9-241882fa4e75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:32fddf8d-0c38-51eb-92cf-4277832bd87e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1689dfb1-c0d3-59ae-8206-dfc6358733ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:7aa99be6-491a-577f-af9d-5437954b7273", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:2703b5a5-334a-54a9-8930-7b0d311bff35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:09fe7f8f-77c8-5f24-bf42-1e8fbc5ad469", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e1519957-4d72-5ab9-83c8-0b25009e84c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:25abe1fc-35c6-5868-a84c-1623a3f8f9e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:724cafba-7cdf-54a3-9ee2-381236cb4415", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:88e2b51f-9f6d-5452-a6a5-3c999c9404f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:719ecbcf-bf2e-504f-9c2a-fcca6bf442ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:267c01be-9cc8-55c9-a947-4e7b1404be25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ba82e806-401e-536c-894c-2871d73df54f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:964ad8de-3c91-5865-8cee-ddb865177d43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5744cf68-dcb7-5654-904c-638e797ea6b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:aef1a49a-7fd7-57fc-9ac0-3d01c2fd4c42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-orm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-orm@6.1.4-tuxcare.6" } ] }