{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:475cabd0-0c95-5cfe-8b85-c76d345e97ca", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1", "version": "6.2.5-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:facd39af-ea86-5135-b405-addce77aeed5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:910e432c-81e1-5270-99fb-731c8b729dec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f0da0084-fc88-517e-bbb0-e05066250a04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:95ad616e-78f4-554a-931f-7e19d5e5faca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:23f12b59-5d43-5cd6-87e4-6b15f39cf6d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c489f107-2dc8-59ed-8201-8a303055588e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:457e7752-d70d-5462-9fc0-978a6334745b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9ebf6fd7-22de-5af3-b0cf-d67745df3136", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:080e6072-d57b-5356-99a7-2c9264f18f4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2254bfc1-7d7e-5604-8d19-1af6b133fb19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ab0a5102-52de-5f73-a1e9-be5afcff85d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:34781770-9e65-522f-b2b0-f7b4559e7557", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b6e8cbf2-80b1-519b-a4fe-2c28d246548c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c003be09-bc86-5ae0-8643-b0ac59665eb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:62aff10d-b8f4-540d-ac26-86908592195b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2fcaea98-ce50-574c-b9f7-fceb6d73a3f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ecf341f7-bea9-5b4c-baf0-4247d8aeab59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:863a646d-c989-51de-8cec-9cbef1d5e42f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9c2961dc-9ae3-575c-a09c-c9af52fb9b5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f3d025ce-fb13-560c-a9da-933e4b215da8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d28da11a-d888-51ac-9055-a5e9e86cf36a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:41a97f66-6d42-5aae-8492-2371a854d74d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:8804f653-3673-5e80-abde-572cd7910f07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:26076803-a6b6-5cdf-9f55-4a19a824c218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:34b89f89-1df9-5648-9e1c-143d99fa6ffe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:57c59d80-ed76-5551-86f1-9b95938e213a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a9fedb57-f1d6-5c48-ae51-6669e5243952", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b12804e2-3e3a-547a-9e15-dfd25ce00cd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f329b835-3eb1-53fe-b672-89d661eb0ef7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:60dd3d25-6cb6-5da8-ac10-f883a38e7cdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a2959a0b-9211-5f2a-a18d-04d78cb9e2ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5142f9b8-10df-595f-9c22-ceb25cdf0146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b45f85da-e485-5ed5-b695-9a9479858f11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:289d9a74-c701-51f7-9eda-4bc1abfa3a1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:383ef368-698d-52c8-aeb9-56ffa3bc563d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:19495174-ac7f-51c1-a0c7-9830e0dcca5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c24f4e0d-dd0a-536f-bfa9-5634226f009c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e5833d30-8316-5ed1-900f-b0614bc770f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a676e16e-ae06-5fb0-a638-c963e7d85703", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e5db1200-db7d-52ed-bcd2-e150c628ad02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:8e1649d6-aa28-528b-b54b-417232a1d4be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c40d35cd-f218-55ef-8515-a4c750143615", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b709c2f2-a772-5eb0-a4cc-fe9945b19295", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-webflux." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.2.5-tuxcare.1" } ] }