{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:80236b7f-bd72-58ce-a3d0-db073de5a9db", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-oxm", "purl": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6", "version": "6.1.4-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9ce7844c-55e2-547e-9fcd-ad8a4fe47f39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:33e87973-5310-590e-9a44-c20dbe0d1587", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:437d58f9-f9d1-5801-bfae-485f0bde3773", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e74ea3e7-e6c0-594c-87e4-37d8796060a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6b4d62e8-a837-5097-a88d-1183d6a75d5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:16264325-fbec-5b44-9c74-41184545c2f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:16981826-55d3-57a9-8e13-bcd519cc7792", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:195aac0f-ef00-55a0-94d7-d08130a7479e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:2d473695-7354-52bb-b26b-c52135430eb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0c770d98-6a02-5915-a597-7d2dabe2a200", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:dc0b99e3-4738-5c1b-ba37-d5ae6068267b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f2d6a7fc-8e08-5561-829c-e2f25e3e9def", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:92f8fec8-8aad-527a-a937-de3c5b3f9f57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6527e1e2-0ef6-5e03-9eb3-8a0ce7452bf7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f8a56045-1978-538f-b712-df7f553681b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:217ab57c-44b1-58c8-bb84-cf58acdbe537", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:36cf8bb1-0919-584e-b3bb-e9d4c00c4d61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:46c07ec5-f644-5912-912c-85fac83715dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0df9d27e-146f-5b34-9bf4-8adaf6132212", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fcd505fb-4cad-5e17-91bd-30712f986166", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:dc3d2f8c-6b2f-5158-ae0e-79a32d104ee9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f91c2b32-8ed6-56a4-8dce-d67367f2d20e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9feeb281-f4d6-5674-ab4e-75dce3d3e4b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9ea95c61-46c4-5a1c-ae11-914531a98c7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:12d31bc3-f4a3-5297-b170-28e179fa9ee1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:7efe47bd-c52a-5a0b-aa2f-550140ff4b7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:60cf13e1-2b61-529b-871e-d70c45f5471c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:da9f56bf-021b-5e87-8a2c-3aafe714b444", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:7a134af6-09ba-577f-808a-d213c70e36e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b77558b3-7c35-5668-b6df-05deb47ab104", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e44a3087-55bf-5163-86cb-f6558e61e4bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:db1475a5-6991-5d13-bfb9-3e73c78dfac6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:59f29910-139d-56ef-8c6f-3eab0cd05e4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6efde0e3-0af8-5a27-8004-8864179e1711", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0da9b6c4-a8fa-5c9d-87fc-c38908632734", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a814aa24-4adb-5eeb-99ef-dafd56b57d87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:4a672597-e57b-5c26-b38c-48d8aba3c994", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b52d2031-408a-556e-84ff-e5251af436a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:56ef1591-863b-5c5c-a2bb-21b44636e565", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e6ba7bef-430f-59dd-9a5a-aa7c63ccf5ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9c9b71d1-bce9-5f2c-8d5b-6fa9b84273c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9c86ca07-feb2-52d7-a2e1-6530de2cd24b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6327a634-247d-56e2-b5b5-46889d33edd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:919a7e9b-decd-5626-b1bc-5577fe4ef0a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c9929b60-dcdb-5005-a692-ed04114c18c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ea2889ac-1a70-5848-a515-3136ef52340e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-oxm." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-oxm@6.1.4-tuxcare.6" } ] }