{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6e02e38a-f643-505a-892d-95a459f947b8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webflux", "purl": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7", "version": "6.1.4-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:95261a83-c860-5793-9b60-880941a73af8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:8b0c3d22-6342-51c4-a8c6-4d56302a620f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:debab852-317d-5808-9ba3-c49e30973546", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:772519c7-86e5-5744-a1ea-13e7afe72b74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:e250ba3b-0b66-5582-9a7b-569655f23de0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:08f8bab6-c806-50a7-927e-80a320f94462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:729ee466-32ed-509f-863a-e5b1cc71c3de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:78abd8cb-65a3-52dd-bb85-17e30e8ccd41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:79f6178e-9c51-5570-a8ad-c2671a4ac260", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:e5fc41c5-b52a-50b9-9261-bcd7a17f5b5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b90db2e2-e0c9-5ad7-98e6-76a72ba6c358", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:62286c8a-8ba6-5c2b-8a02-b8aa94f01bc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f419d55b-e369-5d76-a74f-76fd75c6bc1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:039b2730-6faf-52b8-9146-e319a7f64b24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:a2bdaa1a-a157-548f-869e-28ee48d79ba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b7fd208b-fe6f-5ac7-b245-36dd8607d9f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:73c1969d-4f8d-5238-820e-b465ee08dbc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:d1c9d3a0-7de0-5765-9381-6e7a223113d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:d867eead-9bcd-5993-ab1c-c8e43c1f0402", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:dd5e15a0-01eb-50a2-92c1-d0949ed4cfd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:65e0a945-e724-588a-9058-2c69e7564d53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1ca4c0ca-7b6b-5f39-8c79-2d6082b78775", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:3fd989b3-a118-5997-9e6e-9ff247d97966", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f69cd84e-755e-506b-b607-53db970c14c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:cc3ab58b-2c50-581c-bf9d-7432e57aec5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:865463d4-cc07-5c5e-aebf-c89bf416d56a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c61cea35-954d-5953-a152-207c18b15f37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:444de80c-254e-51cb-8282-e06a11cbc104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:29ebf711-4b2b-5481-b0bb-5c3732d61f3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:3349f40e-772e-54ff-aa53-07eb48f9324a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b769c517-09dc-5000-84e3-d647435f8d4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:eb0b38be-74f0-529e-9a74-c521adc7e4ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:770132fb-9a4e-59f8-ba96-fe122b9fb245", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:bb503a9e-3d0a-5c90-94dd-5698d7515331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b983df99-c76c-59c2-821d-f52c033b8a31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1a414afe-f259-54d5-b3f5-ad89f18de425", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:70932c17-4cc6-518a-8134-85fd3d8dac45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:551cacbf-598a-5c3d-aa42-9a5a05b1efb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1c20d2de-a1e3-5da9-a92c-b4ef8d16fcaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:03297dfa-4dfa-5703-950c-b983c3e28cb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:642f621e-a0d0-5a97-adb5-728227235a90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9aeb9371-5131-54d9-955f-ce21d2380e18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:26683d2c-eacd-5cac-b34a-96c45a156011", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:2ea7b492-fe5b-58d1-a84d-892e5fec7747", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:a8a8a314-e328-58aa-80ab-21bd06bdb5be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:fd72e5a9-c3a7-5eb3-a416-a8a8a1b5ff3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-webflux." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webflux@6.1.4-tuxcare.7" } ] }