{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2c8e40e9-d724-5840-986e-7748f87f388f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2",
      "version": "6.0.0-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2729390c-2920-5275-a45e-7a091b9d3133",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7111f9a6-30cb-5c1a-a15e-550a7cdfadc1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b0736cae-799c-5dd4-ba9f-e2927e649584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4275e159-7690-5d9f-b373-413328e72253",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:38e31d59-3a62-5126-8521-b82653179d97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9862cb07-ac43-5813-9dc3-3a06df0168a4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:742bcae3-e353-59e0-b670-ef568658c66a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d972a5cf-e617-5958-9117-61be5349d820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:77319f52-a3a2-5525-b2e0-f702dc032d0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a42e8ac9-a364-5006-849c-bee169ee44b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ff5395cd-1558-5753-b9de-29d94aefb463",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f792792-3aa1-52db-962d-163af633f770",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:11af5254-0187-50e0-a0ec-c97d4d424761",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:93c2a48c-0118-5e60-947d-a11ec19eb72e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5cd0fcda-7e80-5fee-a8eb-771781f75105",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d4e1b6b5-7424-5b6f-a238-6f8f013a0b40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c03dc75-cc04-5488-bfd1-4bca8c3234fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4ca35798-c15c-56de-827f-de038c804a16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3eb644ab-46a3-5b60-ba78-9607d03ffb7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e064e82-13f2-5b90-a5b2-dec14dc3ddf4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3ca3fcb4-62b6-56df-b96d-116308d76660",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2074c03d-8880-58c0-9326-b1bb72898653",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:98bbc59c-f3a9-5ea2-b884-9c51adaa3af2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f1a5b711-860f-58b3-b5d2-f686223bb9fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:981cbca6-9024-5779-91c2-6e11b74c6e1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b13ab39f-cb3b-5027-89d2-6eaafabf48a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:06e58982-3f01-53c4-9d6a-78695ad578a6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6037b74a-eb99-5bd4-9bf3-5ec5e429f0ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:51412f88-e86c-5074-a5e3-ef6d6e8b9d75",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1802908e-0086-557d-8427-bb7817a45263",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9bb2ec6b-3938-59f9-9ed8-971c668e80e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5e423516-b686-5478-8298-c2193c804a01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9142c8dc-aaa7-5b18-b5ed-f5e44259068c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8cff2620-1440-50d9-ac84-64a439d86f3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1c03fb83-6afb-5127-8a77-9c91c486636d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d47c8388-e080-57b4-91d1-fc2fc924bb5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bf477bd7-c39e-5be0-ad58-a5ba1f9072f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c0451888-9406-5ab4-a1a2-3d1a272f298e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e991fbd0-cd52-5070-ad2a-26bd1735fed7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4300e309-6af7-5e55-b9e9-b7810ece799d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a4499104-4c16-52c6-a247-5a3f91ed8bad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e5b3128f-c866-5838-89af-ffe1f82f72d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0ad970bd-653e-5037-8a29-3390329f5422",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:84bcdf56-f81a-587d-b21b-5189af2559c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c5d593c-5a54-5bd5-b04d-7684c1d0ffc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.0-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61822770-02c7-5754-92cc-101fc78f44b2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:68f3048c-3421-54c4-a374-2db7168f8cfc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ff0e059b-ea16-5828-81cd-1d2d4a4ddac9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.2 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.2"
    }
  ]
}