{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9f34ced7-b507-5e96-9372-50889e467775",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1",
      "version": "6.0.0-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dbcb0be7-7574-5d58-befa-5f78098b513d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:525239d7-96b3-515d-8c62-53c274218431",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0f1f4fd0-7f96-5770-ab5b-eedeb72ebc73",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cd3a05b6-40dc-5657-8075-a805c01e6270",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:57cf1e02-684c-5f99-9215-f0af0014f261",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9eb7598c-2946-5665-9c67-b932c583fcb1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b8e72624-513d-502e-95ba-29f9690b7881",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cd7ddc66-ea8d-5e72-a31f-0d3d12d8bab7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:89376812-567a-5771-9996-27ea23c53ede",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9f156e7d-6958-5fec-8908-b651a30de85a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4a7c6453-04f7-5929-a8cb-84b6e56beb22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a63d2c50-2371-5a72-be80-14686336e616",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6315ae3d-e4c8-506f-a69b-1b5ca4efed73",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bca59306-7c0a-5d34-98ea-fc1c2cfad7a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f7954dc-2c50-56a5-a060-48d146c7accc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d53d3a12-1ca8-50fc-945e-40c513097334",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5fca4b76-9c55-51ed-a297-e068c18a4598",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:61fdc756-6159-59f8-9c55-a1ca89d3d463",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:19c89a2c-526e-581b-88cb-b40ef8008e7d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8f42848-8da9-5ed8-b39e-9247a65bea5b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ad3c8d05-d90c-5172-9e12-48bfd4ff8686",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4fe15724-258d-534f-a572-4e9d61b1a962",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:18ae49c7-febb-5b49-869f-5bb311b4642e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:383a103c-2e6e-5a9c-b64e-3c233546fa1c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d9a7db4c-b0de-50f1-a598-85de018318b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:33b29410-bc2e-57f9-8cb8-498c4f92f17c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f8604f0-20fd-50e0-8495-e1e0839cc250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30a972eb-e014-53ce-b02b-84a1de794b48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c74c2109-15dd-5c3e-af99-46ec5116e990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5d38a0ba-9c67-5f54-9d68-ded67c9a1d08",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3875eea5-f0ec-5d89-90ee-e22144649ac4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fecc0af6-0858-52eb-827b-aa9d31527c99",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a68181b5-4aab-50b1-8652-0cf189141299",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02359bf0-6e4a-5edb-8f7e-390cd6df7694",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a69d845-2cef-59af-95bf-06fb9186272a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:08efb37b-ab26-5a9a-9625-e75821339e79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c0c55b88-39f9-5f79-ae0e-fa2496fb6d1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b52bd52-766d-5ee4-85d1-4ba496a10acb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c65baafe-62ff-5862-a8a2-fcb7a2d53825",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6b46ec51-df22-5caf-9ef5-b1195ec0a0ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b014583-d316-5a51-90a0-627216ead2fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b770225c-76b8-5c72-9758-f63a2f0cfaab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:282ccc21-bba4-5ff9-a9cb-46957205800c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:37db1604-b362-51f1-9209-61b7b28deb4f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a7a9363-a7ef-5c89-a031-6282231abdca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.0-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:701fec69-0470-5455-b27a-561b5db171fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f758e580-f5cc-5159-b493-ddf7ea059e6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:91b1728e-f550-5677-b807-fc214c678636",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.1"
    }
  ]
}