{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7e860377-cb9d-5fde-acd5-931f22fb7dd2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-tx", "purl": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13", "version": "6.1.21-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b51b3a38-1db9-56bb-955e-624f8e4ecc3e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.13 of org.springframework:spring-tx. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:25fb7a2b-2023-550c-a82b-7d0b74411fb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:8c3850a3-52f1-5a17-888d-2ce1aa69e85d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:af387a87-4367-5d6b-bed8-2659295e336a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:d0bdad29-823d-50a2-8ef7-994abf37a50f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e100fa34-739d-5c62-8a63-f27ba931aa5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b3ab7785-b808-551b-b2ad-18d1a5953410", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4b634be0-8e02-5a39-b178-2a75381e7eef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:339f96da-cbb6-5d0b-93f8-b3c1c5671df8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4b4b53e1-0af1-56e8-8fe4-27e2864cd316", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b7fb7552-5cd0-5f70-a1c9-089a16f79a45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1cbec6ae-8b50-5ddf-bed6-98b530b24c73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:409471aa-c333-59d0-be0d-ea66bf02a326", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:54025b79-b109-5950-ba5a-421c983d63f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c2b04fbb-810e-552b-b497-4c48dabcc702", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b5c2fac6-9155-5c17-8dc9-da0f05726342", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:19cf4b9c-565a-513d-adab-2b53e3afbc83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:52198450-4a3f-5843-a53a-7ba4fe719eb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:431fa0c3-6265-5f6e-b46e-caf25c36f93e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:043d3813-3b5b-5a1e-a064-ab48c674d040", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:dd897c3b-025a-5ccd-8857-a337b2836873", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c84e01b5-99e7-5131-9424-ccd5474aff9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4d7c93cf-36c8-56c0-9326-ef5962ae91c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:02207f3b-494f-5885-b59e-9c4666bb2c6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a581ee06-daf0-57f2-918f-5de2d4ac81f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:5d979844-0e1e-54b0-99ce-c17b1568f91e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:081070a2-c184-5891-a335-3247fd758886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:50e4d6fd-0ee6-5969-9e69-7069d328287f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:80e9d5d9-b25d-5591-8801-ba48831a26bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9799494b-03e2-5a45-aeb1-f50e15c86e65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:13be54cf-06ec-5dfc-b04a-a184fbb025a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:8d914706-26e3-58e4-8ac5-7ce4fe3aa3f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:597580aa-624a-57d6-b27a-5c2a6ff84803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:481247a3-124c-525d-912d-3f17cbd4f3f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:bddfa946-7894-5b63-9124-61c459bc8915", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f91b2d0d-5800-512c-aa18-1defb4db674c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:523445d7-93a2-5ce3-a32f-099fa96c93aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:67355f07-e9c8-5db9-8562-d861f3046bc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:d35de9ab-8ad9-5f84-8f63-260bb875cacd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-tx." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-tx@6.1.21-tuxcare.13" } ] }