{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:82bb8a7a-79ee-5a0a-b4a6-ebf1527bd0de", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5", "type": "library", "group": "org.springframework.boot", "name": "spring-boot-loader", "version": "2.4.6-tuxcare.5", "purl": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:113948a8-f781-52d6-aade-6b10f453493c", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:54773cb1-9072-536e-96a0-1fae1136466b", "id": "CVE-2023-20873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20873 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:38246d18-98b5-5bc7-8af0-767620a2fe9e", "id": "CVE-2023-20883", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20883 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b20a95d5-5ff4-5313-b890-16fb549b8c0f", "id": "CVE-2023-34055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34055 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8ea599b2-6785-5d03-8512-0eb27bf050ff", "id": "CVE-2023-38286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-38286 affects version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5e35fadd-12ec-5595-b1f5-675ae3403274", "id": "CVE-2024-38807", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38807 affects version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b0830f4d-f3c9-59bc-992b-b688d693efee", "id": "CVE-2025-22235", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22235 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:823f7bee-6743-5317-a5a1-9a20bbd195db", "id": "CVE-2026-22733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22733 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bcd9032c-a031-5ba0-bdd5-6d3524a654d3", "id": "CVE-2026-40972", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40972 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9739cf40-9bfc-5b27-8323-e3a2d8fbb56d", "id": "CVE-2026-40973", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40973 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:676747c1-ef5f-5918-abe2-93979546f828", "id": "CVE-2026-40974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40974 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3b993949-05d2-52d4-bf25-7df32fe8625b", "id": "CVE-2026-40975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40975 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:06095242-cbd0-566a-8de9-a89204587df0", "id": "CVE-2026-40977", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40977 is fixed in version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ec4a4a5a-6bae-52bc-8723-fdd9a9fa4b8a", "id": "CVE-2026-40992", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40992 affects version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:11ff3392-a944-58af-be2b-cbae6549a2af", "id": "CVE-2026-41001", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41001 affects version 2.4.6-tuxcare.5 of org.springframework.boot:spring-boot-loader." }, "affects": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework.boot/spring-boot-loader@2.4.6-tuxcare.5" } ] }