{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b923bc33-d9d3-56ed-8a0c-546e7cb1424c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core-test", "purl": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10", "version": "6.1.20-tuxcare.10", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:192b521f-026d-54ae-a453-7155f6a85858", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-core-test. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:2e6d83bc-3414-549a-ab2f-3c2fe0ac736a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:08080c03-80d4-5345-9f08-321083be0195", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:8cc6b91a-6459-56b8-805d-afbfb1d6901f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:17006af2-b54f-531f-b381-a1d3fdaaa823", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:2b66eb33-41c1-5b7d-9a94-4a7923bb61a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:df455b41-1985-58c9-952c-5576c9d632af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:40a65898-800b-5c21-b481-3731c65bbf1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:fa01e190-69d4-5b8a-ae8d-cb5095355f00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:2dcac8a5-b859-57d6-b027-9a7086f74540", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:5afcc594-b0d0-5666-9699-aab11640866f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:a2af0324-f377-56c8-8dd4-8bebcd21d519", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:6efe2356-75bb-50a6-b655-7a910801e560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-core-test, and is fixed in 6.1.20-tuxcare.11." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:7507d1c9-a411-5aa8-af99-cebdc4a95869", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:3cc7e918-7441-575a-bc21-21f48997f28a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:c70eff76-235b-5aee-8cc8-e6592d828296", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:7514a9c1-edf1-55ae-b857-fc0c04e9bb1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:18d7bb32-a3b9-5404-9de8-864595303c72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:7c919590-eb2e-59fc-bf76-a72f2b2198d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:d496edae-1c9e-5890-8581-615ad4359c4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:d6f00d7b-0a73-5944-a87a-0c9c52d21d63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:722b2f00-f169-58d9-8e36-4bc87e736804", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:35ebcb4d-98af-5d14-a6a0-8f5ad24105ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:2fbabbd6-386a-5c09-b6fc-41e833184ada", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:8ac26639-2aa1-5dea-9984-12799bcb9e22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:51bfe961-7204-5639-a88e-a07b6b22d00e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:3d26c426-d352-52a7-a9e5-89e80329bb39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:ebd6aa6e-39c0-5706-a3bf-43b6955947ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:d9e530d6-e264-5a6c-8244-f9919f262cec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:7d1d70df-20de-5e65-bca7-9f418611dd92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:aaf30688-3f03-56b4-9a66-d792f0f662ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:61464d65-a7a5-5a64-80ae-3d5ee1bb40db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:4704d5ff-e4a5-57cb-91bd-e17de719d402", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:bc161a25-4a35-54e8-93df-a0d2ef2c638c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:bc3ec88c-e1b9-51e5-9b6a-83dfd383c5f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:ab18c8cb-a7f8-5750-9675-9bde5cb77389", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:315aa8aa-4314-538b-b267-c9736c0b7059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:fb61947b-06b0-521e-a425-55d1d3bcc7cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:c8869e1d-1157-54c3-8cfd-ada3d0e2a28b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ], "bom-ref": "urn:uuid:14798e29-dfab-5a95-ba77-862b4fd0aa3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-core-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.10" } ] }