{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7f35c99c-cfb3-57a2-b5b7-80647a9850ba",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-core-test",
      "version": "6.1.20-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0c6212ee-4010-5b50-a935-ad3d6740cf0b",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4217c62e-b719-5302-8832-1aac7c10e96a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd4b75d4-1459-58c3-a7da-863f5ce90ecc",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f8669be-c796-5a88-b3b7-887072982360",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:194a8ed2-4dd1-5c50-ae84-5a1c98faf5cc",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:664a0118-ddf0-5259-a43c-658c00d144b7",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b3e81b0-f042-5be7-8f0e-5607fe103d4e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e23ed02a-8b28-5d49-a1ff-f31911f6f7f0",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7382cf14-0954-51fb-92ae-189f40607461",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d815eb4b-e47b-5156-82ed-360c43967cc1",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a183af15-0291-593c-9d34-1239fbc29f52",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f31c7d-b221-5d97-b5cb-e8661adc91ad",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb67df00-49a7-58b9-bd6a-625be14315ff",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 6.1.20-tuxcare.5 of org.springframework:spring-core-test. already_fixed \u2014 Spring Framework 6.1.20-tuxcare.4 already contains both doOnDiscard handlers that prevent the multipart memory leak vulnerability. The fixes were applied via TuxCare backport commit a6b78f2a1c on May 19, 2026 under CVE-2026-22740, which appears to be the same or closely related vulnerability as CVE-2026-41840."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4db7ef3d-a07a-59f7-af75-31c5d16d6a2d",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e58aba87-3f39-5d20-ad76-7ccd3312a67e",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51e4ba3f-5096-5b89-9118-a08a150368b9",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1851e141-9c14-5f2a-b1f4-c8be730682d8",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4b5038e-0dbc-57e7-8a62-72f21da394a6",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9bf59d8-8188-5236-ba27-1ace5118542c",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62aafe04-188e-5038-88ba-76f19a638c32",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2d9534f-0db4-52f9-b0f5-d77b50c7207e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99e2596f-98e2-5020-8fb2-b334d4610739",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b2d93ba-b970-568a-a422-79e65b152b33",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:360b0b4e-7258-5e4c-952f-6169e7d15600",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fcc0c20-4de3-5c1a-a19e-bf748868e55e",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.20-tuxcare.5 of org.springframework:spring-core-test."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.5"
    }
  ]
}