{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:54f0b191-fc2a-594e-8e7d-4d04f04467b0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3",
      "version": "6.0.0-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ef2fd431-1173-5658-b491-68fb01986acc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bc075536-3400-5f52-b6ac-8bf0a4e6166b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:70bacf8c-1798-5e28-8e2c-5055fc86e3d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:39d5381b-8a8c-5d26-a297-f014aaf201c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f53ac8fd-635f-531d-82b1-763db1499195",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8087fba2-04ed-5dd3-82f6-eb3c524be66a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9917049d-bcfc-5aad-8a1e-219e8ef8d330",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8efd4587-807f-5e73-bc88-300f0c4a3c09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:00962c10-5362-5a77-94a0-11ec9c3319da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d8d38849-89e5-5f4a-bccc-32eae50cbf29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:82ab8f2d-d60c-50fb-a932-b685cc48e3cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:63fc5b33-0864-5a4b-bee9-5b814c467048",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:55f20de9-ced9-5172-b562-e5e934250574",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5a8a78f0-d4f8-5185-82a8-597becbc2b37",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:85fd5054-26f1-5950-ace4-b0ea4f68ad62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1e414d4e-99d4-5735-9051-cf73d48f192a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9e9f317b-99b5-50dc-ab4a-3526ba5861f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:082b4ef7-dc9f-53cc-a22d-ea4c310b2bed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:34c3320a-f980-52bb-87cd-bee32a7f013d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5078d3f9-679a-52d2-a5f6-ce1c254a2519",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6f49d62d-2e8e-59db-98da-c2a9f62cd1ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:af3f7d68-5526-5b75-8177-5969975549f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:77d83b1c-1455-5f0a-90cb-9b96e33215f7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e2c1f656-259b-50e5-a03a-f08f9a25af65",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:edb3d06c-05c8-5cb3-8d62-f476f8695004",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9026e26e-908d-5992-b536-be60ec9bd0fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a46ef04f-eec9-5ed0-a45b-818058c76c1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3e514da4-d557-5ffd-9ebb-696a20ff4d14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:52b7a17d-2b50-5909-b629-e194802c9726",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e0c4cfa7-f4d0-572f-b538-8bdb1d0c9538",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:50365ff5-9c0c-533f-a7d5-102ff9cab969",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ba8ef11b-4c33-5f59-b3e1-5e59c5ebfc4c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b23cf377-10a2-5db7-945d-76b3c626158c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7301b713-7e72-5ce4-981d-a14d47496efc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7a490827-c00e-5937-ae49-deeff8fe4754",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.0.0-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5c3d0abe-7e20-5b2e-a1a2-9e041ad88e7d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:05d6ebf3-a0c0-5566-a1c0-3b6a7eaa5c64",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cdb351ca-8b52-512a-bf16-94c8ff62adff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:10cde9ef-3afc-5848-99ae-05a1de217ebd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:849e79e9-cb76-5cab-ac0b-198b4b33eaa4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:80f50708-14e5-53d0-80aa-aeff5304b3ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d050e9b9-3bf3-5f53-a40c-2a725770459e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e1a3de8d-5d1b-5a95-b218-db4b71bd66e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f916f8f1-ba41-5115-bc62-2fda102f5e7d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2eff41bc-5ef9-5ac2-bfcf-773778c5773f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:571aaa41-50bf-50d3-9e5c-b6657297cfaa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4f1e4059-a4bd-556e-b19f-11949c32c11a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d539b23d-796a-5e1e-973d-8dd53ec91bf2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.3"
    }
  ]
}