{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d99de8a9-dcbb-50ee-bdbf-09ab3af90dd4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4", "version": "6.0.11-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:16ccb1ee-8ee0-575f-9c02-327a3db2c0e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:f09c82ca-7769-5485-8691-62160c539ea3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:65721469-290a-569b-a236-ed0a54f07780", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:ce98010c-ed54-59e3-bdb1-3a030426e32c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:20f2b6f7-2e19-5799-a8f9-61c70f6fe134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:271a4650-d480-553a-9575-642ec5e4a4d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:869f3882-af93-5ec4-9f35-5fc54af1c1d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:11509965-f03c-5d6c-8035-3ea1cf7fefa1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:3e305a2b-7caf-5772-8a89-3be0fda3c320", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:908e2fae-fd8e-5356-b930-4d1275df773a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:59023b47-d110-5324-b2db-be9a5e129988", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:76ecc627-42fe-5957-b118-8697c02f0951", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:b4b55316-ab4e-50f3-858a-840dbc37f87e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:0d09e5c9-9b5a-513f-ad8e-30dc93840da9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:5b0cee2d-e9dd-5c3b-8acb-a47ffd7cee76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:131b0d93-8b3a-587e-bde1-8d694c676ada", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:d21f303f-439c-5a11-b412-60ef1127c53c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:4bce88a5-faaf-5949-8719-618dae0a8def", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:30853550-c443-5921-af6a-766383bc9a9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:fc5ab443-64be-571d-abeb-950001594377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:4ed984e3-929a-5b41-93d4-33f0e320c990", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:9ebcd0b5-ab72-59d5-8381-e17646f689df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:dd90119c-5a95-5d92-bf5a-c3fcfa7a7b19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:129d3e16-164c-5c0f-bc51-c2f4516b0e06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:2c1c4d8e-d268-5d53-98c6-8aae33a0c7b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:0973c4ad-d459-55ef-984c-3ce940005532", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:31cadc12-5913-56f3-9f5d-4f1551ee9186", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:3f351257-a0f6-52e7-88c4-d13ba6a54859", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:b44a2465-e7d8-568b-9943-a5ac1e56faf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:bb8390a8-385f-5525-8ead-8daa25172407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:98648465-f7bb-52ce-8ab3-795e17c15e21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:18c6fa74-615b-5082-b541-bedc0797bb15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:135a58d1-687f-52ed-a725-8f8755911099", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:791986ba-30d5-573f-aedb-40e7bf75165c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.0.11-tuxcare.5." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:a6583818-6e07-517f-b63a-090e541bb127", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:00f3c935-4eb7-5374-99a9-8e2e722126f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:339cfd52-79ff-5d23-b3fa-ad54ad4fa015", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:9f61fdaf-8531-58e9-9495-1e4feb3d7c40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:d235f4f3-7b56-51eb-9bb2-7cbb8f5b4aa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:b062c3b2-5f09-534d-a61b-901e4e40451a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:6ce66c28-017e-5a8d-940d-5d84b1a9d281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:6cf14297-1b4d-537f-87cf-447bc11775cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:0c6f5866-2f23-5a34-8313-238637e6bf72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:b30d26a9-7608-5a46-a7d5-7a1b2b68c6e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:c816ac3c-78f5-5e66-a414-61fd1a3c1795", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:e9ce9499-517c-5f19-ad11-9dbf7e748b12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ], "bom-ref": "urn:uuid:90d5c98e-4f03-5c7e-9768-b42877273eb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.11-tuxcare.4" } ] }