{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:802c0fe7-e9aa-54cb-9b2f-bf89c4e45c57", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1", "version": "6.0.13-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:6bc43974-f749-5b88-9a7b-154f019d760b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:6870033d-eb1f-57f7-b441-e6e9c8197a85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:038206f7-2ce7-5002-a7eb-d226efbec7ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:36bba61c-3863-521d-b917-0a7443f78463", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:da8f2b48-fe0e-57db-b2dd-46886f411365", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:155f8bae-9dc8-536d-b64e-644d213d9649", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:79f8fa19-5033-52aa-a1cb-a8f5e4cdb600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:15dfac67-33cb-5530-a130-f6d22bfd782f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:d661c627-28bd-5b5f-847c-9264266d0ec3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f40ace7d-b753-5315-8da0-c9a0ae695330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1770530c-22ee-5d5a-ba91-b28b711525db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1b63ee9a-2f3a-50da-b481-27bb7807f53a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e7c4fe42-3724-5c2e-8003-f6303dcad7f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:4ec75a6f-4520-5dc1-a885-714714a6c696", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.2." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:3217c29c-2c46-5798-9252-85a363587855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:7c2972ac-24cd-54d2-9b26-0672e2c55ec7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:406d34e0-23d8-5df8-b58c-d956396244a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:050accbf-956f-5ce2-92f1-a27580269fba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:437b9c21-e457-5448-b091-851a56574db9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:5200e557-048e-5f8d-8fab-44bfee30b002", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:736c2add-2f78-59a7-9bdc-afe69c46424b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:c106fe94-05f6-5042-ad80-eda27b558845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:4ff92842-7f86-5636-8692-044f667aa618", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1c268f3f-41ce-51b2-b22f-cd03abe00db6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:3608cc6e-7631-5e72-a6c2-ed5d45d88b04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e2502b13-1faa-5fe1-9470-496ae9cf5f8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:63de849c-9fd3-5446-8f60-1751b3a539ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:cad40964-6708-5763-926f-c109de58d22d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f88e125b-d1da-589d-8cc2-4877dad6e515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e2e409fe-3110-5e5a-886d-b19a349e3a46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:4e573156-ebfd-541d-9edf-9f3bc37b1867", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:426ff141-7ce8-5ae8-9098-731780c7678e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1ae1c2fa-f173-508b-99ec-1717d47f8296", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a2b7c699-9e54-508f-9e74-e5eafcfca4c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.5." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:0a42238f-0918-5184-b419-3727cf85e84c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:5dcbf9ff-ba86-50d3-aedb-3c632109ecc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:cabc6072-b60a-586b-89eb-a79689c62ab1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.3." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:51da5be3-0604-5c83-9c05-757c81d95126", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:3b8066e8-de6f-52da-972c-ab69815881c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.3." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:df357ae8-9625-5f80-bb51-3a866bab630d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f96cb235-c666-53a2-a1d7-f510c5c27e6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:0f83d1ed-0e95-5492-873e-99c4a0f94df7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.2." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:858cce39-c4a4-5eef-ac94-5621f2bcc112", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:716f6f64-9d91-57d8-a225-ffd889bf7cbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.4." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:099c9745-3287-5de5-bbc6-7ee4f92b5ad8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:75bbe745-41d4-5944-a50a-d892e0a778a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ], "bom-ref": "urn:uuid:610e411d-342c-58cf-82ce-cb7c68ba6592", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.1" } ] }