{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b824d1fc-c716-529d-8155-2a582a56f959", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1", "version": "6.0.11-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:26f30af3-f3f9-5008-bbcc-fdb6ce43a4bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:f9f8de66-e18c-5541-b772-e8e88e84434d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:e86df9ea-030a-5f03-a5e9-444d3a0cba43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:ea31b735-d75f-5f88-ab13-ba030f306cd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:671c36e0-2fc5-56d2-99a9-e832a19d3055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:853144f9-bbf0-5dfa-9bf6-8c0f05a3c995", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:8546e737-9860-51ae-b68f-28cbc589ddd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:e5bb9739-e747-517d-a58c-5dc52c90fd56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:e1e5ac75-0fcc-525b-9e17-208da8b9b685", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:da677c95-597f-5a24-b3ab-838a5be22904", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:20a35eb2-e274-5be1-86d2-8efb0d4ef673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:163f5f20-c342-5ed1-ae59-3505ef7483b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:7e2f3859-3605-51cd-9aa3-3537c2e628e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:5a4f0038-29dd-5c49-b8f0-f0149c036ee6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.3." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:88a85081-6f8b-5a09-8c3c-e4c846357269", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:9016dd51-a486-5037-b6e2-026b0abf83a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:48718381-4fa5-5a56-b00a-a755e371efb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:f28c2d04-a357-5b52-b3c8-3345ab3ff57f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:daef7a0d-380b-5818-a2af-896d52a58310", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:462298b6-b7bd-5fb1-ad9f-7bce62ab668a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:2d859f9a-9c37-5e7f-b566-964ff3a4b96a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:799e3109-48de-5899-83de-716a4b6d408c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:73ecd614-1576-513a-a950-9e99c7e5b346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:a8188515-3610-5a47-a06c-25b8af9c8cd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:c235b208-80d8-5825-8e00-a0fb8adb89b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:950a14d4-7faa-52c9-98b4-e7d1cdc8c942", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:750c096b-4808-5de4-8d86-4a979de63d21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:f881b548-fc1c-5fb4-935b-7014c116a03f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:fcf17349-5341-5aa9-901f-45eca0c91286", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:fc611a63-3965-5611-a1e6-e51eebf1c6a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:603d3c8b-b3df-5659-9d86-e461fb572779", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.4." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:4e7a3870-fee8-5cc3-b452-ba50bfb01865", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:f0da063a-7349-5eaf-9a1c-66865456ccd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:1118b1e8-b62e-51f8-9c7f-3376a54c7057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:494b574e-7942-59ce-9586-5886310ad7a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:65166901-cfed-521b-a948-8a4461ba4064", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:7b15e193-eaf0-5ea8-a320-24c7f080ce87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.2." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:5c81088f-3fa5-58ed-9769-b261e7e4d21f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:0fccd06c-5a1d-5098-b629-2dc0de297358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.2." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:2fb3871b-62b2-526a-a4c3-7a4ead7150f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:2b2133c8-f510-5b8c-bb6b-21fc3c322123", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:2eb2a7c5-82c0-53dd-b11f-ebee51ae724c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.2." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:645ee46a-e665-54a4-adea-52e2f0f81c4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.2." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:af03a576-f3f7-5ee6-a266-d18320c3c38c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.11-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.3." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:92f63de6-73c3-5ba8-b5e6-b2a6f697f0ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:76462ec1-b269-595b-ae9c-c5b0444cb723", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ], "bom-ref": "urn:uuid:21a48956-be19-5139-813e-07ac0507e37d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.1" } ] }