{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5974b464-c5ae-5b3e-957a-2dc5b85a0fb8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1",
      "version": "6.0.12-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e202fe82-8785-576b-8c26-08de1c388d76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dfc86196-39f0-5522-accd-da4081d3bae8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7467fcb8-6a83-5a9c-bad8-61a058e17d1c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1e30212f-f395-51a2-85e4-9de4caf45399",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c2e8547f-e1bc-541d-906f-884ee0462505",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:715956c8-2630-5735-ba7e-0b2c197affd2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a67219e-782a-5108-bba5-eb6bf6b87f38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d81adfa5-2117-58b0-a1a6-d6aeaee43c16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a5c129d-5af0-5dd7-875b-ab4e1e6606ac",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fe005853-bdc2-574a-8d29-b64e9719bbaa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed0e9c38-d88e-5279-b549-1085716dd35f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:539f9f2b-8e30-583b-ba51-9425394b12d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4847923c-5662-52b9-9f94-baaf2de7a102",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a64e54a1-002b-5c4a-936a-f39526f1cfc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0677c17-7a53-53ca-8839-a1870e61e33f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed996849-a301-5129-a0d2-fc5150b04271",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c070e424-b295-5248-bb57-777be5dc5102",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:94e90dad-b9cf-57a9-ba82-a20902627830",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:311611e5-90cf-5848-a188-892d5e51d80b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c647cfba-ac4a-5e0a-a3d8-ba91b8c66678",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.1 of org.springframework:spring-core. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:999710d5-f013-5cc3-8ff7-59f312ee2560",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5b62ccfa-3613-5136-b2cc-1f00221cc710",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30562cb1-1e42-5644-be8e-68de342ef3f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c869cd8e-78d0-5100-9fb0-bb61912a53f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:01a0ddaf-e565-5694-a33c-84fbe5b5ca96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:88baea9f-6c34-591a-8627-267ff8be601b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:28179104-77b0-5ac8-a9b4-6536c5023df8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:348cf96d-dde6-56a3-b64a-aad42355cbe0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e48cdb8a-deb7-5599-9d4a-37d3b700d972",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:909523c5-3cca-5e02-953a-9eefd7173b91",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4ad897ec-66cc-5565-abf1-1f59974053f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:93815ae7-8d3e-5565-a9e2-998e86e18094",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6ce6a4cb-5bd2-578b-8931-dddc48fe027e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f981ae5-83a1-5dfe-a9bc-9b148546b0fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3089f037-1f5e-5c67-8ac6-306ef5a5db9b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49e373a3-265d-5713-85bb-b23bc34d0b71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:18ad8703-dfa2-5abb-951c-2e25ec9a891e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d989daf1-5ad6-55fa-a12e-99b73e2e9ebc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:584108ac-9a09-5c1e-b2e0-b62546518661",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:408a91b7-0b3a-5ee9-82ba-b8d1005eadd7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cf726e49-25cf-5fd8-9977-df0f45ba372d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78632ffe-0171-5965-a490-b283fe392209",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea973440-1e5e-5b2a-98ac-a4714d0bf5a6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2a5d2e38-e47f-5df5-a356-1b70a1c4bf92",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.12-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1c4adc92-3ccb-5111-a29f-67336746d363",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8c4fb6a1-6f08-5290-8283-80e8417e3a2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:50bc0331-0070-523e-8be4-1486ea509d4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.1 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.1"
    }
  ]
}