{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:167c496d-be01-5e42-b546-a49eac89ee1f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6", "version": "6.0.23-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:ba200ac5-3eb0-53c0-9c9f-d60a4c01a8be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:f4d80302-07a4-5251-a31b-8c54f760f9d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:32de4fd9-e674-5e27-9114-e24ad6594730", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:579fad9a-053e-56f8-a614-b2c31c8c7a8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:94ac1cb3-2d39-56b0-b42c-ba6ae9340724", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:b09fa260-3330-5524-b5fa-1ef18be31821", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:f1947242-8d29-5901-b79b-e3e32cd8995f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:f343c3b5-00f2-5898-ac3d-5e6961369126", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:921f99d9-4cf0-5a3a-a30e-bdf09c0ea687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:27bacdad-e972-5157-bef7-5c974450aaf1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.9." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:945881c5-7bec-5a73-9a7f-9c12b78e19d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:994fa002-b6ea-5a72-9bb9-2971c6ff304f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:7e9db5d6-1246-521b-a7d6-54a6d8c6bc8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:a83ea7a1-ca6a-5bbf-a9c3-b09b988b4143", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:7af27f6b-6094-5ed8-9883-d217d5014cc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:98744c0b-af36-55f2-806a-4482f13b9039", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:a5552535-4ce4-591c-9f6a-7f9a414b0d45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:ae4ee5ee-7c04-5351-b8bc-cf934c608963", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:3356be1c-16ca-562c-9093-79144ab35c08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:b4361656-ae5d-5b20-86c9-6fa767468e17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:6b1693b8-e244-527b-b96a-0b05c9811a7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:96439f2d-377d-5343-8f47-8e7f3d4b48d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:e8605182-ad10-59be-a748-4b642aebbd5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:e9285c12-4810-5053-9f6d-c69c129174ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:5d1df72e-e1aa-5550-9c66-c7d3ec9bbc65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:61781754-7dff-555d-9766-f6ae0ba19630", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:69179328-d18d-5ec2-88c9-93ee20edc054", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:762405cb-bf92-50c7-9864-d8a047cf6cdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.6 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:f46b4a80-1381-5da0-82c2-9cbb323e1565", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.10." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:ba656af7-d940-5832-a68b-881b51b9fcaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:1ded3357-c054-50f9-8e57-c2c21addefe9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:bcd42f3a-59ec-5e67-8b5b-de4c118057d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.8." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:9916f6bb-83ae-530e-adf6-461b3fb17f64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:64912c9c-ad39-5059-9fd7-24f85c376b9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:9a370f1a-b20a-59fc-9205-d17a1e594f53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:6ac0162c-b746-5f82-820f-c8509a27b6e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:16532f86-fca9-5e3d-9d9d-249084f5ac29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:ae058e50-5852-5f65-b609-2606ac97c235", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:111d1832-010c-52e7-a0da-88062356fb16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.9." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:98f29d73-015c-53eb-af09-45fb7d956856", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:ba415801-7ec4-55da-b76b-17bfd384edc1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ], "bom-ref": "urn:uuid:015ac8ee-7560-5451-8f7a-b34c262766b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.0.23-tuxcare.6 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.7." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.6" } ] }