{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ebbecd43-0201-5b7b-9986-d7ec9afb0f91",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2",
      "version": "6.1.16-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e22ad8b4-43cf-5847-8aac-ad743d4b380b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bf7a9fe4-1df6-5b40-a3b1-cab0c3b921b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a8338c2a-3a2b-5649-bbe3-0dc6c8fa0e51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d6047cda-1a24-5648-b820-130afc6fedb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0a9f97e4-7064-5db4-8ebe-d0d0df6b2a7c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8117f039-b3bf-505d-b58e-9a0b387a8287",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:95d0b55f-0491-5d96-b696-c5ecf60b665a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3d94d10f-5969-5b96-afc2-52e82d04db27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5437cf86-88b2-50d8-9977-321df94e4a6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c30139a5-4a39-584b-b266-6637d415df98",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:75eab963-5d7c-50f0-ad39-3f561518ee18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4300cf4-930c-585f-b144-3ddb764c6847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:232d1af0-a74f-515f-ae6b-b05154da7a32",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ddfd1782-f2ed-5a54-8a03-a43a840126db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbf235e5-05da-550b-8348-ced91d4f1b73",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c5f51d16-d9e7-5f84-a82e-957834118d8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0e0905d2-04f2-5443-b992-69fe614d6e17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:555341ca-10c4-50cb-860f-a7fb84a7491d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5b595bff-f386-5a40-9607-ecf2ffdddd16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fdc33c6a-98be-5b4e-89aa-6a0dfe305ad2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b21f508-0a80-55d0-b34a-79e8220a9dbe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:745ec25f-4d49-54dc-ad9b-6986caf4a61a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e97842fc-90ec-5bca-ae22-27fbcd9ac13c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4c78d38d-2554-5f70-87f7-48ee7da48ec7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4abaf118-5d48-591d-9f4c-ccf85e137b6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02236cac-4828-59e8-8ac9-9d900950df39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0f26ccf9-9bbb-5f96-b1a1-34603b8bc298",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:38899e95-c403-5023-991f-ba6c6d2fe077",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eb8f7463-1111-521f-95e6-3e62e66c8727",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bd235abd-7f81-57ee-bc68-11b943c1a94f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:21039627-24c1-5e51-acf2-830f237c6688",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7ed662e9-67f7-5474-ad6e-7e380e64c4a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8a604622-992f-53f1-b55a-125927ea201a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:33f192b6-6925-577d-83a7-daf8cb4fd379",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:247d68e6-8fe5-57aa-ab3e-31631a2bd4de",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d58b84e5-e5ff-5430-b5ab-c527c3e61eb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d24b9383-11d3-50b9-a501-294a30be8af3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:faccb493-ba2f-56dd-bdcc-27ef8ae2e0aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1c600432-e2da-5268-a15c-f58ae5d608e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0929a1c6-372c-50b6-ac52-3f5f52cf54c9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.16-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.2"
    }
  ]
}