{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:00d6934c-c481-5fe9-98e5-f6a79760202a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1", "version": "6.0.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3758a9ff-b1fc-50b1-85b0-3c33650d2f04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8d13a68d-6c16-53c5-b628-7cdd51c8376d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ebfcf0d2-7974-5876-ba80-e11ac88ce3fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4e378828-1382-518d-a2db-dbda54091b58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:2075d32c-5435-5d74-b20f-6cc237b04dac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8b18121c-9c2b-5221-ac43-f01d02cbc3d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:92d637ce-8bde-5533-865e-0d2a02802ab2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:cf800207-7d7e-5565-b011-97b3bf5a7481", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ca7827b8-6dd4-5bf9-9591-1e1c85f8f023", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ee624ead-2c4e-531d-abc5-2d422f788ba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e4fb6318-dc9a-5ada-b6dc-cb39662e4422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0dcdde6f-d90e-50a2-8482-fc7486bb3739", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5a9509c9-009d-58f3-9830-0c22112fe57f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:59dce022-43c5-55a6-bbb2-18512e1bc74b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:aba24eac-3848-57d7-8492-462ff31f8836", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7eaaefd6-5912-543e-81b8-5ee10ea6458c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e576b4ae-4927-535d-af03-bec5e8b67b19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:01f8dba8-1355-5593-b9c0-3624c6a3d0b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:2c848ad3-ddbd-57ac-b4b1-8ea71727a723", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:52e95f88-6573-592a-8e3f-b6316a67e528", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e185e656-d278-58f6-9a88-6751bd2c59d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:06980a27-e18a-5057-998d-e7792b7dbd1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:370960d4-84d8-5d4d-ae2e-e48a2e270131", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:fe41fb73-c490-5383-b496-765231a5de8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b798de54-ab59-5c70-9d6f-44851ceccd9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:fc2e6952-965e-5515-a419-eb9ebbaa5789", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b63c9d84-a988-5324-883e-8a8512df6248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5e999723-59d9-5d75-a59c-df0aa8adf890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a147b699-d15f-5de8-a3e0-041e0efa13fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:02a70c9b-1226-5713-a296-574faba7a750", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:eb1e6235-c953-5105-99b0-4efa02220fae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:295e2134-b289-5898-9bfb-de300b501853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:26abde3c-3606-530f-ae90-9dae462289e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:26d0b47c-a54b-5e1f-ad25-db80b02db451", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a6279899-ba64-5e21-93b0-afc575886aa0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:be51d8d3-d2bb-5508-a9fb-62d5f7c62dee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:af77a200-66e5-5d98-b753-f1c94a29b16b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:bea14506-bac8-57ee-a689-1622ac89b65c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:bceb9b49-a852-5a2a-9da4-e57134fa98d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b7239de4-9ef5-5909-80e0-bb9f17b404a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f139f6a1-c36c-5a2f-9fad-0af86be61623", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c0b4e6ce-5534-5d6e-975d-4d223f73e76a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0fb6d44b-ded8-5b42-afc2-10a406472841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:42fb80ee-8dd4-5a38-9601-42abb6f3cf61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f21ed200-d76a-51f6-a8eb-f262f3d9f96f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0a9ad693-9c2d-507a-a72a-8d5391613f5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.0.14-tuxcare.1" } ] }