{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:83e3bc20-fe33-5c10-9dec-1c26ebf5e6f0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2",
      "version": "6.1.13-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:77785bd4-b2e2-5630-b8cd-d42dbb5a6de4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:413bfcfb-9af2-579e-8f40-d8a034cefde2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b288daa-cf96-5e5a-a351-918b443b726e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:701be59c-6c83-551c-8471-9cfcc6639ccd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7d8a8457-eb73-560f-9444-0c3b5e2fbcd3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cb594bee-7979-5a99-96ad-da000e73fc62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:536813ca-1c65-5370-8913-797b1445cfbe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6a1e46d9-0e22-569b-b554-c3eb09ba3e99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b18a011a-e915-574d-b4f9-340beafe3e9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3e89bcd1-c1dd-501e-b2da-27f92dfa1b3e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.13-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:08a33e65-7a97-5870-8e91-aa5cb7de8496",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8da33231-218c-50bf-873c-8e2b61776100",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c091326d-6155-5a3c-bb3d-a8990e18c0ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3a553542-66cd-5b41-afcf-f1642c0bdb57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:53031bca-e43d-59ca-8228-86286118a128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49010dde-58a7-53ae-a072-6540d5e4189b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ba83c71-185c-5288-9991-8f094ccfc7ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:98b0fa69-3e35-5d43-b7ee-07e7fc72a754",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e34e10d6-686c-5e70-863e-18ad6e459255",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:94bfaefe-5fd2-564e-89b6-844e0f5f9c44",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ef2f8cb-063a-5fa0-9190-8f5b3210eb2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.13-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3f01b10-c9e4-581a-89cc-83ccd31eef59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49691ca4-61cf-5e76-bc59-a00ad747e865",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fcacb230-666b-509a-b351-69ae37c754ab",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b83fa87-21eb-54c3-8219-768e67a013c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2acc2411-6f07-561c-9cf1-7c15f64ad59b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4db13e21-1019-5497-9eb2-cb1c50a818da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:951ea8ed-3504-541c-a023-8b4f3f9ceac3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:74ea5b0d-0993-5f4e-9a46-615e4f96f056",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:94cb29d6-1f09-50cc-b4a8-fa9eed793fcb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2a98814a-ae29-54a6-99fa-a13a328d9187",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:73fb0c9c-bbae-5b1e-a481-2cc555b571a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fcbf42e8-7af7-5887-9eb1-3375ed699844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d535a7e5-3f36-5556-b2ca-ef249edcbb44",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:db0ca633-c4a4-50f1-8e1f-197a34c2891d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:707964d7-287d-5845-8180-a6b52441691d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d7daf0d0-a6a6-59ee-86d1-1acab781a813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e53638e1-03ec-5b70-894c-0548bd989085",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:43a42c08-af54-5248-9c81-f88b8a86639a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:91e4a2fe-1345-5614-924b-2ec06c0b1991",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c52025cb-005d-58eb-b037-0b0e4822887b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:48cb45fe-ccd3-5fd4-aec9-186cfc623ac4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.13-tuxcare.2 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.13-tuxcare.2"
    }
  ]
}