{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:492206cc-2e7a-5648-b1a4-90c6722ed104", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13", "version": "6.1.21-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:d09cb20a-76f9-5d56-ad44-da664a5b00c9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.13 of org.springframework:spring-oxm. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:163f23d9-ffb6-5a51-8791-80c3f350e1ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:89728a70-0f52-5ba5-891a-2c846985cb5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:8429cc83-b71e-5b0b-a30b-0269e36bcc75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6594f885-b7d2-58fc-982b-b92bd6519638", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:eb6571cc-616c-506f-9de1-013d572b3171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b220fe47-ab93-5182-99e7-4f188e14e040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6e03873d-c5f2-5cc1-804d-73f46d7f6602", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:518c7675-e9ab-576b-bf1d-f3a0e5331e84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:34d15665-650a-51e3-be9f-c536b6b0c4d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1c4c00a5-6e65-5343-a34e-2270f10557b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:610817b6-4d5d-5886-bde7-2a09efe0e1f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ed1a73f5-a194-57f7-b252-9011c9ff765b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e7f1c7cc-ec23-5082-92ad-45929e9e0e37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:80bae012-23bf-5fd8-88ee-c4362c86c922", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f95b20aa-f260-516a-beb5-70063aacaeca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4f5a25ac-861b-542b-b944-34ed038a5bc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:3278cfb5-b9b3-5ca6-aa01-c817720873fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e798e3c3-1b1c-5dda-abac-46981868ecff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:129d895a-72be-5436-ae52-5a458a883d83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1101d8cb-d041-5702-adee-59ecebf8cf01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6d7acd9c-5a3a-526b-a50c-12f3d45ad40c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c2afbf9b-2436-5a33-8370-f0055f23dcfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:00c593a6-b0cc-5fc1-8d9d-b065d393748f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:494c4bb3-9dd7-5fc2-9552-bae5405a74dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6061c9ee-bbef-5a37-b026-9d28530c472a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:19d3b332-5990-53fc-b1d7-8ea000322996", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a88a0172-60b9-5fee-87ef-13db73e5401f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:2e8c6362-351e-59b6-815d-362d101f016d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ace0f7d5-2257-528e-9c97-bffb2f1bfaac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:701315f1-c132-5772-99cc-0c4b2a441c67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ebc47745-e50e-5744-901d-f77d50799763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:d9dfefac-7442-5efe-b0a2-92ad2c42d979", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:17d5b92e-43a2-5ef5-aaa9-8952dcc8da5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:82df8ae4-3645-50e9-869b-988645a680f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ea6896fc-175f-509b-82d4-f8fed637e88f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6d6f05bb-92b3-5023-aa13-44b765a726d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:60fd6800-81fe-5a10-bea6-0119c67747a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:41b791ab-dee5-5452-baa8-424b8cdf0bc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.21-tuxcare.13" } ] }