{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e9289828-d582-5a37-bcd2-2c2f5cadae37",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8",
      "version": "6.0.23-tuxcare.8",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:71b12bad-d7c0-5b87-9e12-f820d6e80232",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a1ba48a9-3b8b-52fd-9b90-20ff5cf7b874",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c1f1ec36-1719-5d66-95f7-fdcce30167cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:33f5581a-877d-56f2-8036-3cef41e5cc7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e37d6cc7-143d-5ca7-a0ad-fe6631f2fd94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6bb9b801-f560-56ca-9af4-30bdba426f2a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e927b6eb-a5f9-5a2e-ae2d-51be55fd6b13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e9b6b6d3-c806-5e18-9899-7fc76d01021c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d919e160-8f62-58c2-99ed-21f35838f861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6bed28e6-96f9-5abe-b631-ede06bcab22f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4fef77b8-e6ca-586e-968b-c18fe57ef092",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3e924f26-d0c3-5339-963d-ea2977b3c4c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d58a62e0-88fd-5b09-ba40-426b8254f701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cdb295be-2e2e-5393-a716-3855ddb5d16b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:9bcf3379-b6d5-5bd4-b41f-c1bdcdc6fc16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ff45f314-4257-59a7-ba2a-3ad8c932af8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7694fea9-4837-565f-8665-a143c43741dd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0011defe-2be2-5024-9174-c0a65d79e255",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:94ff2032-57a4-538c-9da6-4d5c38d0cb67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3625e477-aa24-5bf4-938b-0477806edb5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d730dac8-46ee-50f3-89f1-389209837930",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f1a30010-09fd-5a86-914e-76caa539ab0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f51e0c05-17e2-5ee4-a06c-ac82e99e56e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8120f3b3-966a-5664-87f8-231dac0d975f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:76a06e8b-4085-5906-b117-ad80761c1c9f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:33822493-2065-5de6-a8ad-42e8aa4d2ba1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:d8f49122-7998-51b3-a6f1-70776441b67e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c6692b8e-7084-518c-8f80-1cf67fb3e9e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:36c6c685-fe91-55c8-8678-d372e5ab5cf3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.10."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f1e09997-ec18-594b-b2e7-275ac0ee4ddd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6ef3fb6c-3c0d-5857-af5e-923a1b164623",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:54d88e85-16bd-5f5f-b275-fa4b41001a8a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:26af44f3-2864-5201-8153-253ec96ac5d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:aee2acab-3807-5b8a-86d9-b940451dde9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:33292b4b-c2c4-5398-bba8-ff59e0a0e921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:9c052a59-57ab-5d3b-8fa7-45774f54003b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b72e7c9c-033d-5c1a-9ac5-734136f7b6f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:615bce44-73ad-5cd5-a5af-2f36b16923f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4c5acb38-bb39-5858-8096-972c587218ca",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.23-tuxcare.8 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.9."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:dde6dddb-1286-5e55-88ea-2d69d43571fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e9f4384c-0e06-5248-9dd9-e0e283695fcb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:578d6549-4dbb-5f1e-a8d2-dcba05c2cfa8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.8 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.8"
    }
  ]
}