{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fb068ff1-9147-593b-b3be-5678941d5637", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core-test", "purl": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9", "version": "6.1.20-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:f1b7f173-8666-57a4-9bfc-aa5dc42baa91", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-core-test. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:4bfb473d-f098-573d-a497-9b9a2f2b0bf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:04656152-efa3-5840-8b65-c70269a5f58e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:0670e87c-4fa3-597c-96e2-a15c8addc40b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:fee560a4-fbce-5cd5-8b94-76eaa572e04d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:d6c011c5-12e5-58cf-ab5d-e548d0e0222c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:9ac7c73f-dc6a-5dab-b6ba-9cd59a5b5d52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:11e31d9f-9d50-5400-8fbc-16c215d3ea61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:4835110c-f49a-5e21-991a-1a01459af934", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:28297b07-1306-55ed-8b95-06cd0f1fb08c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:8009858f-9ee7-5ff6-82cd-800899b2b33d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:3b674a30-eaeb-509c-9470-388663f86396", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:75f22a17-f4de-5d21-bfac-17058083a8cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core-test, and is fixed in 6.1.20-tuxcare.11." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:74f7d357-68c1-5abb-a908-09ecbfcd0b39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:7777b5cf-b21e-5e01-aa26-a25da65fac4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:20bdf533-350d-5bdd-8805-349b1e9b0d01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:46965121-ede2-57e0-999d-0da02aa81bc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:75175fa8-1518-5406-8653-4e8971075843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:9e8ddbc1-ec61-5ad1-b5de-fb8ad175e4f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:05e556f4-e159-5deb-b9b6-7bc091c376de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:73d86398-14cd-574e-8fc2-d3a5d35e9f85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:df258bb6-6e5c-5be3-a14c-de06a9a0e701", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:ce2366a9-9329-59bd-9886-db2c667b8d57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:cea7efd8-4a0b-593a-aa3d-168436f6efa8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:dc16e75f-4cc1-5aaf-9a9f-1e67c44dc12f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:4cf856b3-c36e-5937-8f2e-fff0f9f93d93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:3f039f8a-8203-5671-9197-622a4c0ca235", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:3761bedb-7b18-51a5-b5f6-c653fdd7a123", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:506bdaf2-36e4-54f0-9f89-174a2b37e893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:9a2c17c6-8585-5409-8a24-4551addc6e60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:9dc579da-7b68-503a-bea4-d959db70bdbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core-test, and is fixed in 6.1.20-tuxcare.10." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:6a19c698-a75a-5af1-b8ec-0de4c12e94ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:ccd666f6-96e7-5766-b3ad-cda1c318cdae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:24fb2459-c7af-5788-bdf5-ba3ce5273582", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:87d79da0-1eed-5e31-aaa1-7cbe1b3be9d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:ff364508-4574-521e-9a7c-3cd7ce7bf168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:c26c27a1-303d-510f-a8a5-f3786ea6251d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:cff05e47-70b4-5068-8df6-d84394ce4f5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:b7b3b6fa-a5e7-5bec-a264-54716326d44e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core-test, and is fixed in 6.1.20-tuxcare.10." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:2197f126-d8aa-5744-bf3e-f3a7cd6cfbc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core-test@6.1.20-tuxcare.9" } ] }