{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:59e31df5-9b29-5d28-abb0-c34650286e6a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6", "version": "6.1.21-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:45dadfa5-09d2-5e6d-8cb9-cbf4c7fe0ac5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:76f8114c-9ea4-5409-8cd7-ab819c6296e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.9." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:a348fdb6-1018-540c-bf3f-8636be59db3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:55d701cf-dd07-52f1-9123-6fb4207456fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:7f4e8260-29b8-5a06-8079-41988a6f7e6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:68069f68-eaed-508d-bce8-aa2504c9ea9c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:39e69d2e-d7da-5922-96c0-fb440a0b5c54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0facfbed-2113-5b29-a78e-3717173a28ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:40a3bbdc-bd1d-5b60-bc11-0b2b42577c4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:7391a05f-f135-5732-8fa7-029b60d2015a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:abfaa005-6fc1-51df-a756-75e3b7b8f6fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:2ccec1a8-a450-5a00-bfac-a304a86dec0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.13." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:c0070a8f-ae0c-5f7d-ab9e-2339c990f48a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:19398ab6-0e51-5bf7-884e-fa001c20d59e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:722c214e-c6bb-58b2-bd2b-786aef27f602", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:4bd46347-f1d7-5e19-b855-dcdbbdff7d35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:aed3f0c3-2b24-5555-8a1e-0a0fb52a4be1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0520056f-b89e-59c9-8e11-58ec4ccbb047", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:d1d8b76d-5a9a-571d-a3b1-56556f28702a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:ba30d8e0-8557-5605-9535-5c46f9a0f921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:33d2344d-6be4-5562-8294-1513a797394f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:1155fb19-68a5-57c2-a939-b60bd27e31c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:148acc67-c84e-537a-926a-d637899f9ccf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:13caeb3d-c25f-5c39-a02e-6b7ed3b141ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.10." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:bd8dd1cf-0e4a-5da6-8a2f-adc0d45a5a55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:85cdfb59-5c57-5239-a893-7e9270467fc8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0def2042-afe1-51b1-a77c-58c80dc4e178", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:5694307b-8e3f-527f-a6f1-2aafa09ad728", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:64058225-aa2a-5b61-aa54-b2465a7c2048", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:5242fa1b-3214-5e52-8392-21427c2fff51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.12." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:daa06ca7-8bf6-5d52-a063-4aa7a311c4ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:d6ebe9db-acd9-50c3-bb63-2ea79a8a37f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:169e8469-f003-5ab1-90e4-7a5051233f91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:f297ab65-7f16-5964-8905-c40780b4684c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:252568a5-fa2a-5ad9-960e-35e7468756ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0d32b7e8-d029-591b-aebb-69aa73c3b53a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:9bc1ecd0-d6a3-57b0-9b33-025b2a4156fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:dc071764-1666-5b24-95b1-6160ac430073", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:7af71f93-379f-5571-b38c-913c47829d20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.21-tuxcare.6 of org.springframework:spring-context-indexer, and is fixed in 6.1.21-tuxcare.11." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.1.21-tuxcare.6" } ] }