{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cbbbffcc-346a-5761-b01f-da45899cfe8b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2", "version": "6.0.12-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:a5c7452f-a6e1-523a-b48c-a96edb02ad1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:9186389a-20f4-59df-9b3b-2b42fb7796d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:05b58438-07ba-5f0c-8203-2dac3b30a735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:ccf83a18-b779-56bc-850e-cac7020b9054", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:78ceb1d1-1ced-5f5b-8bc8-cc9537843ae6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:9c5188aa-4b75-5330-8665-ad252164bfee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:28264b6b-7a8c-5979-a391-ecb155731e6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:424fa163-199f-5cea-adb7-203503c561fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:e2fdfa32-1f7e-5e47-be14-26327398951f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:59aa46f5-273a-54c9-8ccf-cc6ec9c569b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:060d6a6a-4904-5985-8b9a-11c0c7ee7f95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:79ba371d-d9a3-5b8c-b01e-a9c3702af18d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:40de8df4-cc62-5d99-b3a4-e797bef1426f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:f436e4d5-dea9-5f4b-be0c-cd8845cd3629", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.3." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:0898b822-85d4-57ec-a42e-e19799595fd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:0841c880-3252-596a-87fa-6bbb70deca30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:e8e19f60-05da-5f87-827b-26db8add7a73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:2563c137-959a-5208-a047-5fb686dc2b88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:761140c7-0756-5ed7-ab73-8ea393cb5984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:ab7957cb-8656-5d83-906d-517b1eeed89f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.2 of org.springframework:spring-core. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839", "justification": "code_not_present" } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:6c0e7aad-6327-54ca-a838-7cb83c86a537", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:b67607b8-d5e0-530b-967b-b145917f13da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:497c02ef-149b-59e5-9334-d795a8995cf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:7e903545-1953-573f-ad4d-1b2566633f2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:4785f507-a831-5ff3-97fd-9a3160258287", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:650a0148-73f8-55a0-a7e2-da8e57e51a12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:33677c16-65ea-59d5-971b-41f1ac491b22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:1b113826-de55-56a4-824f-6e57b7275319", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:6225c1cd-a9d6-5030-b195-43c81eab71f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:6277444f-0382-5708-a3f3-83d23897d454", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:28128b67-7173-5c09-ba30-0aab1063d15c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.4." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:e30895f9-075a-5874-bdd9-545c4e1747e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:6531c9fa-6a4c-5b5a-adc9-fec1b34916c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:aebb544c-5049-5bbe-9cb0-9ab6194ef443", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.5." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:124fcfa2-d322-55d2-aac0-1d8c5d21854a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:f3a631fd-d324-58e8-92d9-e2a66fcceae3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:9b21eba0-9110-51ad-af78-1a2711cded44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:bac38995-f216-59c3-acf8-8ee77d07ed89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:d6973b0b-ef04-5a8e-ada0-c7e6c0b011fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:1c3e1875-29c7-5b2b-9725-20102192fb01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:0794afda-5d79-5f48-a8e2-8579eddaf586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:57671371-2cbe-59f9-9972-93587c815226", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:75659289-2c1b-532f-8bf4-bb982b7cf542", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:69a404b5-74ac-5b5c-9c43-b38d7b2efb9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.12-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.3." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:2911dac3-81dc-57de-839d-e98bdc2086f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:a836d7f0-5720-5295-aa18-f4aa0e5047ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ], "bom-ref": "urn:uuid:d81196b2-5f37-594b-b8a7-bb4f4c543b54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.2 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.2" } ] }