{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ccdbcc97-7eb5-525b-91a8-a81449b4ac28", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6", "version": "6.1.21-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:193e17f9-8a36-5331-a0ac-f30d9d3b6899", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:505ba5f9-c085-5982-a8d6-c633b62b53fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.9." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:a9c612e4-d1d7-5743-ad61-f3aa2fa15514", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:a7f518ed-78d0-56ef-bcd9-4eba47de938e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:49eb1d1a-99b9-5d77-8f0f-d49d931c192f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0737471e-19d1-5d5c-9ee1-b0311e0a41b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:e488beef-d2d3-5efd-9609-d14532edeed8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0e82c790-b2a5-5ae7-a946-56d8ba5f8388", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:59e4582e-9e57-5dec-b678-7039fb39710e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:2bb64990-41e8-507a-8e5f-1eb7a8bf45c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:db50ae3e-99ed-5151-ad14-64588bb740ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:5efc5572-e390-5271-8a18-e62db6f5bd5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.13." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:be6787fc-28cf-5128-8535-bc3c89f6d2a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:9ce9b7df-670b-59f7-ab4d-65cb86548852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:6d7e82cb-8621-5df6-bf77-669ebb9c0398", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:99340e46-fa6c-5d23-804a-dcb0f71ab444", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:7cd94353-57ce-53a3-a9b1-dd05e7627a09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:5027ec41-1de6-5eb3-84ed-d9d0a1c0f0a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:c230204e-2ca1-5690-a832-5210ffc5d103", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:1603b30b-3902-50cb-90c7-2a25f69199a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:51d8777d-cec1-52be-af62-a02a5fed2d5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:cb4ca37c-4f58-523a-a1a0-b45744e674cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:7c65eefd-5a8c-5cbb-8246-19201ca803a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:4145de30-2fa7-569a-915f-44fd2f2f77e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.10." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:db2958b8-8ec5-5f35-be7b-151fb6b17d57", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:c321f9c8-a311-5aad-8cb1-d03f40438ca0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:cd937954-32e8-5176-91e0-097ec2dde17b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0f440ca5-248f-5aad-a63d-657392777f88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:7b79fc09-0e39-52bb-aef4-045b7bd52fdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:3e9bfbad-c765-5b32-a210-d45924397f38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.12." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:80bf17ac-04de-50ff-878e-364568b32ec1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:5fe4b590-70c6-5e06-a335-25c49901d591", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:492b3c3d-2d9c-5f08-bc6e-903d145f0bcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:afbde09a-56c2-587d-bac2-17ca26c05505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:f4b14271-a4d3-5afa-933f-a82279d94e13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:1f76a4ad-f5fc-5f1d-b145-8d7506a61b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:c2bedd66-d954-5ef6-a5f7-94bdeaa34bb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:eaac88ff-58d0-541e-8306-536f9658de97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:40fa82bd-e6a7-515e-ae11-08bc6b3be1bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.21-tuxcare.6 of org.springframework:spring-webmvc, and is fixed in 6.1.21-tuxcare.11." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.21-tuxcare.6" } ] }