{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:47319358-005d-51de-8ba0-66666d13f6e5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3", "version": "6.0.13-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:00769c09-333f-5015-84d6-4f8a4243874f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:a3377690-aecb-5e49-ba75-a9e0029c8fad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:77728632-019b-5f85-a3d8-a2a27cac1699", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:3f061735-d4ad-5171-acde-13696d56a6c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:5e91f3b0-dcd0-5e5f-9aa1-64207c802b90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:140e384b-d686-5966-a59b-a9eec03fff2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:4773433d-7615-59cf-8b66-987cc4153c9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:d5803205-1b5e-5fa4-babb-b40f1451f169", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:da3c7493-1bfc-5f97-a736-58e5d09419f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:65b1053a-bc56-5dc0-8bc9-0ab876485803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:96476ad0-4884-555a-8c18-f8b2e99f3d39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:4b1ee3fe-bc68-520e-85e6-c707eabd3c29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:08925b4d-f7bb-581c-b6b6-bf4959fb4389", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:355d3d79-7c3b-5e26-ad3d-640495bd5dc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:6e110e6e-e612-578a-bc20-cd4bcd521b36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:3b59eae8-70dc-5c6f-bb0c-a92a18e3fcd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:4a5ca8b4-b4ce-5a4e-b4a7-189535a9b2df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:49ca3ae8-55d9-5de7-9f12-753c133cd1a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:bdb09d44-f1d6-59a3-a4da-600e752903b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:72038d03-c4c7-5213-aaf7-b096cbc7210a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:ae87ddb4-852f-5ed1-9d64-640c8978c15e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:25ec3f21-529b-5b3c-b8c5-3f3de1bb8e97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:fae72c7f-8146-586c-9fce-434573516100", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:49675ff7-3d68-5ece-986c-3c8fb52fc2d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:936b4666-c8c2-5309-af29-83d867fdfc5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:25d10b14-690a-566c-a9c9-e243c0209457", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:49f1d1d5-0f59-5c96-8c62-cb8c56bafafe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:c66d2ff1-23fd-56b9-84ae-50f7e6815eb9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:44b6cd2c-228f-59a9-8c31-3ca52de04171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:1be2b778-d0da-5520-9cac-95bc2dae5b51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:e466c822-058c-5f2c-b5f9-59e41e62fe66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:23008d6b-7bce-5cb6-b47a-d5e5c8b9e6ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:0adb4942-d438-58be-8c49-4de77f39bf4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:adab2ce9-06af-5afe-874e-735351c07efd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.5." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:1bb8d024-82f9-560f-8f45-87ecdc3b6d60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:d4775dde-508f-5761-a931-edb900e10145", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:c5a5ba9d-00db-55c6-a759-b9b43397816d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:5ae6af82-174d-596e-8064-9fa8f5dab629", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:6a991f1f-efda-564b-b269-395cd66fc3ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:fb7d4c49-d680-5dc3-a85a-f5d384fd22e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:1663c7db-7373-50c3-ae77-82feabc68991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:4c64aee3-9d47-5974-b3f9-0e30e53e27bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:0cf3821e-55e6-5ec7-b83a-2ba12c351f93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:7ba4673e-cf4a-5eb3-ac30-3382774402ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.0.13-tuxcare.4." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:4e9b3b50-7b03-5462-9fe0-6d4a6ff1c6d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:3a2190fd-4c85-5712-9d5f-f020eac76ade", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ], "bom-ref": "urn:uuid:e5644d3a-4d27-5212-830a-ac5162bb4086", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.13-tuxcare.3" } ] }