{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a28d285d-4c87-5a6c-9f6e-388fa6e9c133",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4",
      "version": "6.1.15-tuxcare.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d9c59099-9dc9-5671-b74e-893fb7d2ab67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8bab9742-f834-5475-94b7-975589e781a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d16791f0-1399-5d65-8db2-913e8740fdb8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3e40982a-9e05-5b4e-8ec4-403714531387",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6b56420c-7d14-5703-8305-80d4383e9a6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4d6c2c7a-7b64-54db-9479-298d8f006f6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e1df56a8-37fc-576c-8d31-b7ccd133f14f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ff310be0-57ea-5fdf-bd79-ee0e20645f64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.15-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.1.15-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a8db2557-d679-5e8b-8cbe-a4c8cfaf99ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fec72be4-8b94-5922-bce1-cfedc17f8e74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6b7e99db-a72e-5e0e-ab80-f0b40ea5b552",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:eeafcc04-0c92-5ead-9adf-034cc26fe8ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:473b5ece-2e5f-597d-8d31-68ea6ac74aa4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:65f0089f-bc14-5fd4-b28c-d2568e6b400e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.15-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.1.15-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:179f306d-49d9-591b-b150-ba1cd84921b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c7701dc1-3b9c-500f-a5e3-3f7b92aeeacd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d930abba-4251-5084-858d-2e50255ff3ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3df70db1-00ee-596b-8825-198ceb81c58a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d53d096b-8df3-58c9-9562-1b3aa2eb61ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8c83602c-3d3a-5b29-8eed-6622bc01bbb7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:80f44daf-f4b9-5577-92a2-10db26a54cd7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4e9b34a3-a213-5809-acbd-52919cb9f7b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:926b5a6d-9ac6-56a2-a34c-19f37ce7ad80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f2a09efd-55fe-56b7-aec9-f317c5bd6c6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b72a2dc3-4aa3-5fa8-ae69-e211c5be4f9e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7292aa1a-d00c-5d67-8a99-498398f5baaa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0e2da5d5-b375-5a9c-a790-5cc1c9ec75c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3a2eaae4-297a-53b3-8a40-c7f7f9edbe21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:42d8b53f-2d3e-5178-a100-cb836b88139b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:26e9cd2e-d28d-52e9-9e4d-d6a70cfbd7d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7f852353-630e-5337-b4ec-aae371e9b0f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:535cde54-97fa-52a1-8657-d734a866fcc6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:625a4f65-0ad8-5ab8-a8bc-418250852623",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8c31a3e8-fc8a-5cc5-8a6f-b5f0959affab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2ea8c066-6b6b-5468-b2e0-ee69c074ab94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:448bdea6-fa66-52c3-b734-5c5dbe3c42e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:08ba4cd5-52e0-5dbc-b08a-3a83d5a7f83a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:abd4e533-49b1-5ff7-9e9c-28ce0cd4b147",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1bbf88a3-6430-5564-a4ab-802f1b3a605d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0cca64fa-4408-5f9e-8422-7d1b0f08ea47",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.15-tuxcare.4 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.15-tuxcare.4"
    }
  ]
}