{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4c7194d0-bb0b-5c2e-8311-e9507dff6f9a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6", "version": "6.0.16-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:76d1f9ec-7997-5eaa-972c-1d09de5c3fc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:210548a0-1fdd-5fb6-adee-cd4550945e00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:034494f0-8335-543d-ae13-e8549ec64729", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:304d52dc-addc-51bc-ac43-4a10833e52b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:5e32f112-b0df-5965-94e4-680be2f9570f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:e8768f0b-4ec6-5685-849e-3ee983ffbe96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:5806776c-b217-5240-b806-3a2577682c02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:1e4411ad-7da1-51fb-b73f-1ec57106d5f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:078a023f-f20b-59ba-9f08-7933a646ea50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:6cab4105-a669-5b6c-a0e4-e29d7c79bea1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:b7f24481-7730-587d-b9bb-5120fac12d3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:fdd1ba7a-69d8-500c-ac26-72f7d60f95c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:d39f1672-cbf4-51bc-94b4-63c266ffbb2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:b8d12608-db11-5553-b9bf-96d3c7b3805a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:9190c8ad-51a5-515a-bdef-45dce81cc2fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:23ad4460-8631-5f77-b55a-35d478cccb21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:098a26a9-d6cd-555f-95bf-7bad3763fe81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:56fa8ea1-dbb9-5027-a472-ace21f80908c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:fe91e54c-b62d-5c1e-b898-80ec4635f88b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:345310dc-3ccf-5850-94c2-05979536d231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:d1b75eb2-fe75-5481-a703-e5051f9d5266", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:4cbb0045-651d-5972-a278-c07f6981077a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:b2d275e3-9ce6-547d-8d90-450720d3a821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:ea82efaf-5cc5-5400-b2d5-63d87757f0c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:fc679908-6d18-53aa-ac5c-c8e1e4310f40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:5e5c3d81-91dd-53e7-aac8-0db1e82c292e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:8a21c425-74c0-55ef-bd74-c8e0ca171dec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:b4a0c62a-5d2b-51fc-b1c9-86b02c744f88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:6084fff8-42f7-5a9b-b1ab-3ad73b67fcce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:5f4ec72b-b267-5176-8a74-1de22a55e85c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:0b919c58-89c2-5622-b076-45e3aec09f9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:baaf1c28-2bd7-5e38-8ab4-08139ff0989f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:fd0fedfd-0b54-5238-82f6-704c4897d066", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.16-tuxcare.9." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:420a5fba-73c3-5584-a175-527845f322e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:73fdc453-5ed2-54d9-94a3-bc2020123b5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:127192dc-5890-5944-8adf-45002f25e18c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.16-tuxcare.7." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:0e854d84-bd25-5e73-8b93-26bf51ab9ced", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:d2349698-2725-508f-87c3-57e6d822c560", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:76fa1210-cb6f-5a31-8483-df4f1243a70a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:2c696ef1-21ee-5af5-bdbc-9b1a706b0bec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:3aca6a15-7a19-5756-9a21-9e353f4a8a4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.16-tuxcare.7." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:12d510aa-5373-51dd-a69d-455124dce49b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:2764a3ea-2f93-58db-87a7-8a67f7956db0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.16-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.16-tuxcare.8." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:155a7f38-947b-5c2d-b50b-8f6cd58266d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:0fd7adf1-d4c3-54e6-b278-7bb64cb7e838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ], "bom-ref": "urn:uuid:d83db5e0-431f-5f63-8ee0-c0b539167b41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.16-tuxcare.6" } ] }