{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a22389f2-bef8-554a-8707-a2fbf41ec6d9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1", "version": "6.0.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6eb91a68-8473-581a-acd4-5411deee8472", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b4251a26-79b9-545c-8cf5-4bfa6e7713bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7208f427-0822-5e5d-be4d-33061251fd77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:eb71eead-a447-52d2-bf71-1cfdaf01bdc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:df82ba3c-a982-5965-a151-22639bce6186", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:78d73183-9c40-5976-b460-0de7bd5945fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c11daf5a-0092-5501-969f-9e5435cd8051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:11036973-5ab5-5d3c-9ee8-8f30c8bdb8ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:72e13acb-4084-554f-a9b3-ecee9674e8a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c3e2b420-9e64-5a57-9443-123ecff7e090", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:780d9dec-37b8-54b7-a942-4214671d7ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8b8d5791-e544-5df0-a08e-8658cce48b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e462c007-71f1-52af-bced-219ebb85bd31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:65af9c18-9d74-5ab5-9015-d5d3163eb49f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d1e2079e-4485-51b3-9258-72b81a716634", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:eb16195b-ec4f-5c4f-ab4b-167fd31a2429", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0c91ee63-61af-5d01-a3ca-c39874317f22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3c482030-c2e9-5cbd-9d57-5fca07a9ba71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3906ee1e-a782-5851-9cb7-afa9751921d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c9b41ba8-32ee-54af-8229-ee4b4e8c7a42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d3904fcf-5f81-5e38-8202-7b9e4a4c4471", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7ee6952f-c015-5741-b4e7-3e50258d807c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:14d330fa-2cc0-5d98-b7a7-bd2fd3c06fc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0f2e946e-7a99-5748-81c1-102fb822f15a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:31f53e3c-a18e-5b8e-84c6-f1202af1b08a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:57357eaf-074c-53dd-9f7b-7165ef9dcb4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7c8cf288-a0f3-5602-969d-ef2fd00ffc3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:500deedf-3d5b-5f8c-a48d-f4bbe77fc7d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f783ab1f-dc68-58ef-b049-57677b83a0af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d29e9cfd-1f4d-5128-83b3-5111b5046ad1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6de7d7dc-cebe-5f74-ab46-5e626b8476c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3a17809c-8bb5-5d4a-b1d4-a3e032120afb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7005fc02-9e18-5cea-b56f-d30a6bcf4381", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a88ac462-4bc8-5d46-8288-ae27e4fffcdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d1e9e532-7add-5ad0-89e2-39829c1260fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:557472fd-9870-521d-859d-3818303b0237", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d0f1ae0a-71b6-59de-9940-a6c868d9415e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f2ab3755-cb09-5237-b710-4857cc07b35a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:009946fa-8431-583c-8b10-e0b971dff330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:50fa0b52-95ba-5b3b-9d4a-e0f5910bf30f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:622ead7d-15f7-5ef6-8492-39a53cbc726c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7a6cf7f1-c197-57e1-b952-f22cb5ee3182", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:dd6fc40d-df26-5bea-ba31-0a91b20cb3bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:37e9bf45-a8cf-506c-b2da-2c9425234975", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:69d5b756-da00-57c3-9315-80817c81a151", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a6f3f354-ef62-57d6-881b-a11d289f43cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.14-tuxcare.1" } ] }