{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:78b21c4a-ea16-578e-be77-38a8171655af", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4", "version": "6.0.12-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:ff96227d-f27f-51f1-aa73-d7444f8de3f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:8500938d-de93-5059-a030-993e08f4f640", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:d1cfe399-378b-5035-b208-68b2281b9e75", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:ee8c5f81-2b1a-5653-9775-cd5479ae7e24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:38ce9bf0-3352-597f-a8cd-e2fe7d88b126", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:d6a50b14-0458-5472-841b-4e9a53ee34f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:8dedf7c9-9ad0-5563-aec2-6ec2c8f48dca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:d5a7790b-ca56-545f-917c-ca55d812dd98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:25ed33d0-6e2e-564f-abdd-2663370a1b9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:41cec282-1cea-544a-89a5-00c414cf6c8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:9b33bd4e-7b5d-5653-b9d5-dcd850a3ad54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:b63f2eec-2af4-5dd9-8757-26c14e53dc77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:5154284c-f9b7-5a96-ad07-1a550b419ab0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:c139e40a-ec29-58f7-be6c-2f31fe18048c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:9c4cdc63-a1f1-5404-b84f-df5d78d2b650", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:6e4b3afb-19a8-5640-90f1-bc7a6bfd4aed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:fb78b2d8-0363-56c3-88f4-4dd5002a876f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:415ed5f2-c15d-5589-8b43-24764abc04bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:7582dcd8-73e0-5b40-ab5e-b41bcb5ada8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:2e35ed4d-cf27-505d-9ab8-6229e0c1ba52", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.4 of org.springframework:spring-core. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839", "justification": "code_not_present" } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:a280410f-e515-5c60-80c3-c07af8c01721", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:b9683ae9-42a6-591b-8e6c-234d1d0914bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:8f701273-dbc7-5a4d-9bc0-1fa3773d8f01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:0c888859-29f1-51cd-bc7f-023e11713706", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:60777376-35a9-52b9-8a4d-874629d92256", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:cf5b5962-76b6-579f-ab4a-c4f257d40183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:1d6cbf22-7bac-53d7-8606-14e072ef6697", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:87a2064a-8249-53be-a389-1019f4bf9757", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:dc6c4153-d109-5c4b-831d-7cff2591a02c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:9b627844-c72a-5fa8-9acd-d7f028241493", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:e0ee3393-0cb6-5754-aecd-40236c3bb578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:682872ff-aa41-5071-be29-b55366511997", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:1da97364-1c89-501e-bab2-5732fa742239", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:68dab3ea-33d8-56e9-afda-172d6c92ebc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.0.12-tuxcare.5." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:e48e9b3e-a4f4-5ecb-a70b-edb121cde751", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:f323100d-0db5-5a24-84b4-3c5408e46625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:a7d8f954-cd61-5187-8b2f-59d2eba373c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:df7d76d8-3c38-54c9-b974-06cd68ddc9c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:926450b4-f401-59e4-a809-64eb56dfd337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:51e0fa3b-f6db-5dd8-ae34-67a54c2025db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:5979f716-3ca3-59cf-8da2-afa486216bd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:0443f39b-bd3f-578d-965b-bcf3e3602ba5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:bcffd9ff-b2ce-5efe-acff-c061dd330c2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:11c604c9-9ef5-5a63-a98d-1a766125e19b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:de93c378-4add-50c4-82ad-3628d5341942", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:1b373693-47f3-51be-9804-f585b09b046a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ], "bom-ref": "urn:uuid:5670d131-bd58-53a7-b4f9-127b1fd773c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.4 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.12-tuxcare.4" } ] }