{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0a56567a-d1a4-587b-a85a-ddd18214372d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4",
      "version": "6.0.0-tuxcare.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:297147df-12c9-5e7a-9f0a-3f8148b9c21b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:407d0249-91c0-5439-a99b-ca4547273741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f11fbe19-9ea4-561d-9daf-29bf009ee506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:174eb94f-eb5f-5dc3-8715-9ada792019b1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:081cf5f2-e494-5b36-b9d0-92f0e6c26400",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:38bc811e-ed80-53df-9a82-45feb65f68fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d582c0dc-3ed8-5e25-a6d2-81a980ebdd5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:337de0ab-c212-52a7-afae-c65a6873f3f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:13c34f15-e6bc-5416-b6e5-dedc9b480b9b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e331f834-c0b9-58f7-a4e5-e6d7640e352b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a7ee2fef-1255-592b-aad2-4b09a39a6165",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7d82564d-61e0-5492-b6f4-1330ba9511a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f053552f-207f-5ce6-abad-331198a8b72c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a5db1db6-1546-5424-aa80-d7146036384e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:76819ea2-4fdf-5d67-bd54-04f44b794f9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e9c839be-3b95-5b85-8e12-60176be5096a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8989ad39-53c6-5696-b21e-312eb503ce17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fc72bf9c-70d9-54fc-93ec-9c527766d2ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3821b08f-aaf7-51b7-8cd6-b9db21d3db27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:27c491d6-642f-5374-9539-79f846ab7864",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:65226adf-29c0-573d-982e-48660cfaf51e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a6398826-3b94-56be-9c9d-80d3a79cc268",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ca4820fb-880e-5a1a-ad9f-db1e946bc544",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1af9fcd0-0399-589a-a625-d1687753c5df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:efb25582-05f2-5023-8aaf-4933a7fb5114",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7044d8ee-ad80-553a-8e2e-61dde48cda62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1469da46-4d16-5d14-9fa6-7fab5cae6a1c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:476742ca-f96c-5e18-8d69-f9abf1c598d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:64545192-1e3d-5f64-bdc1-83302185cffe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:72463c25-57cf-5878-af32-69e44f1e83ad",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:461feb03-19e4-556d-8976-e68235abecd5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d2bb74ea-78a0-5a86-95d3-edc91ce8a99f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:143c7e32-8c05-59a3-ac34-695a63f2480a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dac8023e-9915-51ad-b0ad-5ca988c1ba29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7a4aa85f-8de7-5373-97b7-93fa2df60822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a13250ff-3c3d-5235-9233-69bf063b0d1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9019466a-8412-5ea8-aabe-3f88b9e293a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:04e1c4de-83d1-5310-908e-d9a031cc2288",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7581b6d9-f162-55c8-acd9-99db7144d93b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:035bf6e0-584c-5bbc-b3a8-4b7c3a07a852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7e8e9b95-1a89-59b8-a2f4-889d2795b075",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:99c362b1-fd5b-50fa-a75f-8d7098664d15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1a6fcde3-a126-5365-9d3f-538455be7ea1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e51b0f34-1f4c-5306-9cfc-7a8be1710b70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8be720be-2e7c-53d5-b434-ad1c504f5767",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2890b954-b969-5bf2-847d-2182f4946b11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3aef6af1-3163-5006-93c5-937572608fa6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:74738643-8870-52e3-a676-3e2876a0c800",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.0.0-tuxcare.4"
    }
  ]
}