{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:488e05cf-da6d-5d3f-9cab-62645863c091",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2",
      "version": "6.0.13-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b6fd8135-f6d9-5ac4-bc4c-8d53f27e71c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:10a02e99-b6bb-50a1-90ba-40531eadcbfa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6ccaac20-1d90-5417-9faa-28c4061cc19f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3d803b95-f331-5d80-84f0-8a379fe0b321",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62591866-598e-5607-9588-9a10a13b8c4c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d867a3bc-5796-5f63-9afb-ec64ee6539f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:20f5db94-fe76-529b-ade2-cfb46691d523",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:89ac718f-b6dc-5a9d-be78-e7b90cced438",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ca7b61b-6105-5a34-8668-7384fb78e30b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b48dd524-6371-5394-91ab-3b5659682410",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6fa488a8-2be0-5167-800e-ca0bfd84c662",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fd908a01-39c2-5491-9f6d-8abf8393d386",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ad7b083-74f7-54a3-beb7-5ba607fd1419",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:835277af-ca52-5f6e-9a75-4f8f1c52c4e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbf7c91e-d9a9-598d-9f5e-3360b34e2a4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4111b4c3-9f76-54aa-828b-f15fa069c02d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6e05ed8b-1448-5ebe-91d6-55ab6c5951f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8bc83b47-1d0f-5549-a592-86f414bd7dd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:36cf3b15-d345-50a3-9bb1-4bf84fdbc17e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b6810226-5ee2-5190-8843-eaf97db4cdbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0f46eb6d-cbe7-5e25-9613-eb573a54af3d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:796b81de-f636-5301-bc23-57efac03a50f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a90ef46d-f5dc-5ff1-8f84-b2f46174b936",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:358acb57-8ce3-5cfb-89c5-d7353ef8dcef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41984a99-3d8d-5acd-b3f7-cc250cb86434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7fe1779e-8478-5822-a0e8-f1aa2b43f17e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:69e57df7-9349-58cc-8155-5b4441bf6ebc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0f0fd17c-009c-56ba-8a31-de3c2a6fd529",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:401e4fa6-6ca8-59e7-a0fa-76137bf37b4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b0b97071-405d-5338-9f1e-03b3c7d709a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd38ebe9-0647-5d49-88a2-36c609bf967b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ca3d6c8f-a528-5f02-9872-1e04374fbf27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f4de2fa7-f0e5-5fd7-882e-477b554e713c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:872e44fe-c82c-5b5d-aed0-892c9d268f6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:37ac8c58-d632-5ae8-afd2-6c6b16c426f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:05b9439d-6587-5788-81bb-b53c7de9a44e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0b352590-36bf-5371-abbc-4843117a1e4b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6f9348a2-ed8a-5057-8582-836f38954979",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9061e2e7-f499-5663-9c7d-313d47f640d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a5bd564a-20e1-5694-858a-79a5c457789a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4a9329b1-675c-5881-8446-27d8e18d3b57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec5d357b-8714-5d0c-8773-2e56a1f5abd0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:424459d5-b226-5c68-9aaa-cdba20d53fa6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bd7843d2-3ba7-5256-8ad0-94e56f198b48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aed63821-e0e5-5d55-85f0-68567a22f5fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b976c557-7425-5c84-92ee-27755fec4448",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6ca9a6b2-c6ba-5f72-8bbd-a1d19d15d62a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.2"
    }
  ]
}