{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0f875c49-ee31-5af8-9891-6e79f25d1de3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core-test", "purl": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0c785057-8711-551b-9066-301fc748287f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-core-test. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:dea8f487-900b-55a7-bcb2-0298c6adb0b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:10d07dbc-3430-548c-b89c-4d58ec9616b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a041aac2-cc56-5e34-8f08-a2336bc0081a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f12dbcc0-aab4-5929-a3cb-cf0bd050e02b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5a92a7e4-9f40-5bf7-a75c-658cc8b8f72e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c02e869b-83cb-5996-a2a6-018548060c41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:11fa5fa7-bfd1-5cc7-bd6f-262770118a98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d88e2a8a-ae9b-5f70-8d00-bf5f232b4be9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7e17149d-dc9d-5d91-b527-e69fc71d43b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f304c635-163e-526b-8486-90c72a77f142", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a08ba310-f636-5091-9054-7872efc2c76e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b80b74b1-e3a8-5240-8592-a046749594c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e3524624-e133-5b21-83bc-bb1ba6b5e88b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a6b49c6b-2b91-508b-8ffd-a77f628dbff7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:50ea1f96-f0ac-516f-8d65-46b359c0e41c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:74ad43f5-5a96-5fa7-9e9e-9f790ba6a95b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:09c037fb-835a-5a1e-bcf8-5c7f223595c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:59251010-bcdb-5020-b829-97a38b5e2e66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4ae1aa3f-e029-5ad3-baea-390d85dc2668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:41df2554-b2bc-5e58-bfb7-7e6414565be2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:061c43a1-d46b-53f3-bcd3-7a9d797a9190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:565c55da-2132-5c9b-832e-406ac565663e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:560a5245-8cfd-5abe-8b55-2db6c77dd2ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:42a69c4a-fbf0-5928-a5b6-16c106509f00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:89694c25-3ac9-506b-af47-889721ac6aba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fd192f84-aa60-5b4e-9345-bb84def6283d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a975d375-2158-5e46-b631-6feb386cb89d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4471bd32-9805-5146-9036-38f6becb72fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c6b2778c-f2fc-5415-bae0-c599bbec97a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:71d251bf-1628-5c3b-a3df-1a5b8c9fe95f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9467436c-9a13-5d22-b27d-1134fae0f0f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e50796f1-ee17-5571-9e28-78721221cda4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f44358da-2f3a-5a70-ba93-15458968a467", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4446ca75-39e4-5913-be44-7df5760d9cf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:13f47a4e-a1a6-5853-ad39-1bed75cd1486", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a10b8f8c-c722-5cdf-a3d6-a7cbf60a150d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:476e07c0-d418-5670-a8fc-66b77e695512", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a931060b-6f68-5196-a19a-0af58703d979", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:58582107-f1a9-569b-955c-7e7193ba4066", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.11" } ] }