{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:41d1f513-569d-5247-91f8-a5dea71a66b6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "framework-api", "purl": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7", "version": "6.1.4-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f5aa6364-8c23-5d6d-ba7f-ca39f7b690bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:7b263322-4892-50f2-b1c7-4a428679d155", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:69493d9b-8369-5fcb-a5f2-fc147213ea55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:5c9df8b8-cf75-5a1b-8d9d-6b2e21a3e38f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c7e8d8a6-0695-5a26-bc41-bacf67a6ce08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:7c7f7c85-9afe-54ec-9910-a19ec034f342", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:d310860f-8d68-5694-9a2c-1b8d8d0e9011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:2e965325-1a6b-5b0f-95fb-3b3b08024154", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:510a51dc-fe41-5e89-b9ce-bec3c0279d5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:6b48d752-0e7c-5ce2-b557-4bf9b72204c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:94be6338-74de-5c3c-9edc-2b2587e57ee7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:71ebe63e-ce73-5ffa-a382-a013236032f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:077d3739-8d45-5928-9bfa-4bbcd4f4e307", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:3db9e273-0f22-5abc-8a9e-e03608d745e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:5d6cab08-a8c9-50d3-a28b-9aa0071408b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9c318a58-63c3-5e8a-885c-cc9767aa5d1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:12e56453-193e-5c60-9ea3-c16a4e7a70ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:bb0eab09-f2c1-5f18-bc64-5a0264bdb9f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:8b01e83c-23ba-5c9b-99eb-fe770ba4ce0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:76d4d4b0-5941-58dc-844e-d57b6804a259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:40834f94-5cbe-5a01-95d5-476681d7ddd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f31a32a3-8675-5d45-90e5-fb2cbb124ecd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:a3b1e1a7-3d71-57f1-99f2-f0ef816fec3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:78c8e109-6240-5256-86c8-d926abb70b36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:503b34f3-5ef8-5f54-8d06-d6beec3046db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:7b61f1a5-3c3b-513b-9b3b-4f148bb1a561", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:35db9020-31b2-52f3-8e2a-0662d8bb60b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:eb5ab0d1-295e-50b7-86db-dd00d685ffb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:06ce1073-6875-5b7f-b376-25571fd7646d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c8b874cc-a1c9-5487-ae6d-4eb9b65aa555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:4a5a6cdf-b35f-5729-8052-ff6467153b11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:098dca7e-1e64-5e07-9b48-bfd8c8127276", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c6099d02-f59d-5f8f-ae89-99885e0b9a83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b3b0742c-8679-5527-8abf-ac2737d2664f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:86cfe122-7341-522a-aa01-e993c0a2b3bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:8c1732a7-9126-52e8-a5ff-9d867eba4f37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:4b1465ac-5699-5758-b2be-951a621eb018", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f4f2ade8-1d8f-565b-9db9-b4966ab85ed8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:a3393548-5a84-5140-946a-a2983032fb38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:47d546bb-771c-59fc-b6d4-50b407315050", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:4ddcf407-9ab9-5bf3-9793-462b38e02432", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:be191b60-9238-5d88-b5a0-4be838502d48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1af15de5-4624-51b6-9520-9d3ec0177f3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f681267c-4f38-50a1-9c1a-ec1ff57f304b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:0a578ada-f19e-50e8-9fe6-4cfbbf4c689c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:da471ba5-ceab-57a4-96cb-69318d17a902", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.7 of org.springframework:framework-api." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/framework-api@6.1.4-tuxcare.7" } ] }