{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b72456eb-783c-5814-8b11-2a087c7c17f6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9", "version": "6.0.23-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:2ae30fd5-6bce-5e56-868e-fb78e2cfa190", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:ff404226-3645-5806-9dad-907cd1e821f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:697ff457-9d07-5ac4-824c-72de7554ebc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:6bc8dfa3-43a9-59d4-af67-00f50aa0e0e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:b18fa7df-3673-5e4f-9f4b-b7698cbd2cd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:8400d170-1e78-52be-bd61-0379a55ae8d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:4c308ed6-f7e8-5d99-84c2-ca9ad376aa14", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:c8fab9ad-25aa-5312-915b-9465e32a46ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:a84f580b-4616-53de-82b9-110496be16f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:d5022ed1-8f0f-5551-ab3a-d1152c45cb3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:c5a33163-1236-50ba-a33f-69e0f3b85463", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:3c59eb88-c014-5331-88d8-dcb2eb9e230a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:0cea6986-8115-501f-8b45-017250298b42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:d6988dd0-bef0-5d9d-bc74-3db7ae8d24d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:4161b618-0850-5d81-b050-4e9ff577bc8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:a2e9d815-87a4-512d-b8a6-17029178692a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:6c1075ef-139a-5edd-a0f1-da95a2f5ff0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:867133cf-fd04-5781-bd51-16fc79235479", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:18ac4e46-a5c9-5421-bdc1-6e7134cb002c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:57e51818-81e9-5954-9984-bdd8b01e47d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:08c20f3c-a08b-55c4-8ef9-0964ca0659e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:5cb202f5-6dae-5cc4-a51c-7ed7f9d5bcfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:9ca9f050-87d4-5af2-9b7f-692db536f45b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:d4bf1fa5-c8ac-5a36-9e61-639b700cbde9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:25f84214-7802-59e4-a75f-2630374e1359", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:f4c2f57c-ccaa-55c3-8f4f-04cea0b2bc78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:ce10628f-1dd9-56e1-848b-6bb439c6a8b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:7ae221d4-c515-5be5-8b48-d1d6aaec84fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:e4cc75a1-5dfa-5c99-89c5-f57a55b23c82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.23-tuxcare.9 of org.springframework:spring-core, and is fixed in 6.0.23-tuxcare.10." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:7e538f44-0c07-5c22-a4e4-b76cd8f1dd15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:02028679-3eb5-5199-ba1d-0a34b68bc59b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:9bc65985-b9c5-5d91-a8de-6ce30ad3f830", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:6eca4f57-ebbe-5042-ad0e-02b39db3616c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:05a9113b-71ad-53cf-8492-52fcb12a4866", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:58ec1c37-4413-5be3-b0f5-5b91e35dbf38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:82fc7ecf-e2a6-55a4-b33b-bb51ac773d56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:fdf03ea8-a20a-59af-a43d-40e359b06e9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:7525ec57-5d8d-5325-9f0d-d18b7e70f738", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:b88afa66-0591-591f-ad8c-4cc85288ffa0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:64f672a1-00f4-56f6-991b-ad5e1c37e380", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:a1ff44fb-880a-5d4f-a27a-cc3acedfa997", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ], "bom-ref": "urn:uuid:1ffb08fe-5950-53c0-bee2-edba5c348667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.0.23-tuxcare.9" } ] }