{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:60139833-2168-5e50-80bf-51417a7a5b22", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2", "version": "6.0.11-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:69442302-d2ba-53fe-8427-b3b302d157a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:bfdbcbae-cece-5964-abfe-b913815006ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:b75a25a9-d9d3-5439-b03e-ccdc52ed41da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:945d17ea-23c7-54c4-93ca-6ee12dc6c38e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:fc25bc75-b6c7-5537-9c2b-b21ef37126da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:fec7a501-e1f5-59f4-b686-9bf1cf281b8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:da77073e-6b87-5dad-a63e-8382c9f0e008", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:3c2766b9-f028-5631-bd05-5aea36118bf0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:0ce59763-643b-590e-8074-41a769dfb77e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:395b8250-8ceb-503f-962e-5452c7690686", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:6e1d1ea8-6e6f-533c-be11-7f7c455df0fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:adf210b0-d246-5e1b-9204-bb161c80f113", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:6873bcd7-758b-5564-b6ad-6515b804edda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:a578f4ae-2118-5a04-ad20-7296618565b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.3." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:02794a6c-2b37-5fa7-9af3-ef3505393439", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:7f8e76c5-621c-55bc-ad3c-d86b86ed48f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:154d2dba-92e8-51c3-b714-dd543d9590dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:924ffc35-464c-5b68-8267-90d8f30be4f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:53e327f6-3069-53e7-91c9-d1e41d221aac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:e992f3bf-ecca-589d-8b27-1c3816bb6a9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:f252f9d2-b86a-5f51-ac8d-0078484f08cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:308b054b-7561-51ec-b9d9-8259471bf735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:20e5021f-5ae0-5c32-8d9c-1a04b182f596", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:9eefe6a9-0b9b-53e0-9316-e7406ea49deb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:268ea735-c5f2-52be-ae5b-7971b7f97cd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:c5c0b796-d6a0-5dcd-bc5d-5ab594444f04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:1d009c0d-76c6-51c4-9cdc-811a457511e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:d99416ef-b3a4-5d8e-9cf4-eed1c7898b5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:6ec18e4b-a7f6-5e54-8f7b-c2753316e4d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:cd9c2fbc-c290-5137-8e49-2f05529b9d71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:27e30fa4-672e-5948-8a95-82e9a2cf8f6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.4." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:13e117fd-08a6-56eb-9a25-39698cb05a55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:707e1854-c348-5e89-8cd0-649cad1f0eb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:b8427cdf-caa8-5a4c-9a02-c38621dc2090", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:5a6ca77d-b999-57dc-9d38-76885130fcf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:2e01e8ce-eaa3-551e-8745-3deeea464dfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:2593c84c-22e3-51c6-a69a-9ff1369fdcfc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:6f548dd9-82fa-5ee9-b61c-cfe2e779c693", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:c5e17f75-1383-513b-ab0e-2507dec7cb36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:ca6b9d6e-e5aa-5c9a-a19b-8265727c67d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:9dee18f0-4aba-584f-ba80-8b83cf975253", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:e564eb4b-791a-5698-89c0-721dcd252d48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:728de234-f4ae-55bd-8f40-ae7b4ee476bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:5ec82e11-1b1e-5144-98c5-5f2ea78f25f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.11-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.3." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:180ccae5-542a-5665-bfc9-1615d548eb87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:62018a36-e5fc-5ce6-ace9-f95c54d69de1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ], "bom-ref": "urn:uuid:6c439283-8b1c-5900-9a58-e956a4979914", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.2 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.2" } ] }