{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:516090f9-b2c1-5ebd-8785-dfa0cb467225", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1", "version": "6.0.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f9c9ec3a-19e6-5a2c-8a20-03685ef20572", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6f37cacb-b1c5-5de1-8753-b067c01ef15c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:bafea6e3-5f63-5523-a662-5e3787c9ce9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:674fc47f-31c4-5463-accc-f875fee0e6d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b5eb1efa-a047-594c-9303-fc51055fadbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:590ee3a8-1c6e-56c2-8816-7b64b7cb1a6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d71d3b74-986b-52e7-8ac2-4c7d79f9728a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8f0b427f-3920-5a1f-86b6-de2be7b9b825", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:662e9574-251a-523f-ba96-8cfe312f43b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:672d6a65-9e84-567a-ae84-79024a4dadaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b2499571-635a-5f46-a7fa-11b64217a91c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:82a6f92f-67a8-5a10-b2cc-cc46bde6165c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:439370d3-58f8-5ca8-afb6-1ff7ff959bb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:11ae234a-f7df-577d-8100-f92b68cdc425", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:53541a35-8b92-511d-a216-25b703117eb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:2d48e9cb-963f-5643-9f36-24a74ad44c62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5464b3bb-76b5-5060-af0e-0cbdd8183c63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:83b76b08-ae82-5566-beba-3d673b3f7cd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9d106228-b0a6-5c35-825d-f78a51d4ed6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:01af0b5d-2ea9-53a8-83b2-351b45ab5156", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8bb5080b-c9fb-58be-97e7-5868714e1717", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:afce5015-0b56-53ce-9790-62590baf945d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5e02de39-1cec-5f96-aed8-92fbcd44f027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5dcc0f12-69ba-58ec-8f80-a84a7e8af0f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8fb66287-086d-5837-bd10-4aea3e5591e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:271713c8-5aee-5b59-a025-0ab92e48e203", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:080abdb2-af27-5524-8499-da602d6117af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5631db2b-630b-5cc2-b375-a022c9a48d00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:bf889638-336d-5966-b457-25abfb7bb497", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:815caaae-147e-562e-a334-f1e15d61607d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4c7408e8-ad03-588a-8eb8-36c977150b5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f530e8a7-42cf-576a-8778-ab5eccfc4880", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0b93cbef-6173-573f-a404-67d52ac3b759", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:703d1a23-6f27-57bb-9cc5-94dbda3077f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c69ed557-443a-5329-9501-1c14b58806c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f24c7079-906f-584f-983f-3a69757833ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:360844e7-21dc-5e2e-a8f9-bfe06b9a5247", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:aeb3b270-afeb-58e3-9596-2b2dff3d2917", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9c73aafe-296f-563f-8f31-da7e1dfe5b32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:56bbf214-a199-593c-8c1c-6a271ee3d367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:59ed118a-a1ae-5437-b573-e4bda44d1ca2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a84da9f2-5d9f-5762-9f25-54752c9c81b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3d2c8ee1-06c1-5ba5-9f32-82dcb50f087c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7d9b07e3-d6d0-5a5a-8220-7f92c479d295", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f0381d4c-33e0-53cf-bff4-1a89b64c6ddd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e7afe16d-3610-5b7b-a797-64b93202dcc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.0.14-tuxcare.1" } ] }