{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:aab9a9d7-40b3-5e15-85f5-f2927c282242",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3",
      "version": "6.1.16-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c61f6623-9493-5237-8dd9-646b318b8da7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f5c17be7-8e37-54cf-9bd1-f77946d4b89d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0d9a7c1b-efe3-5cd8-8ed5-bc78a9ee3bb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:912ebd5e-3820-5df0-8f84-df86c47130d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:de923818-5d03-5240-937d-c139048e890a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:84114b05-1116-5b3d-886a-3fe3af79cc5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4eeee26c-93b0-50d5-b271-f77fed1af17f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2aeb51f9-43af-5a41-9b21-2a1f2c29bcc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7b439511-aeb6-5bfd-b180-cf47388b2a82",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dd9dbeb0-2c4b-5a7b-98c2-067e8a166616",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3d2252ee-854a-53a5-98ea-8ade85dbf5ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c0499645-463e-5afc-8bee-ed73db18f1f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2704c5e5-b1a2-541e-af90-32a399ed0e9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bf15f95c-3496-589f-874d-6d0d9db5d41e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cd18306b-cc80-57cc-8da3-a2774d757469",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4d9ff1e2-9eab-56e4-9b8d-6e3b4b826965",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e0d21247-399e-5334-beab-57198f555b30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:94ae9922-6043-5a1c-b1ba-dd0462031097",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:13a2e85f-9ba8-58b7-a461-ae92bb2c2bd7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f05de190-2cee-5dc6-a601-bccef3b490bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e2433115-4f7c-5af7-a317-027f32756f79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:333222e5-0080-5733-89c9-267ce8770dec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:82a88e14-da21-5ea9-9979-6e950e79f1ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a4c303d8-e611-5afa-acab-7369cabe5070",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5bde0b06-e75f-5b46-b044-ea290ea97a7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a737d7b7-305b-5210-bf0d-caa965e1bdd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1f93c78f-5c57-5dbb-ae93-d17c7c6b3b3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0cac430d-a9f8-532c-a328-53c2752908f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d02bba57-2a04-5f18-8ecf-b2ddf428aaa5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b55fbbb7-0d25-54a3-9091-5f95e99f996b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b2116ed0-028c-5e45-b822-9699b7360eaa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:87dac3a1-c05f-5094-90c1-c01f8ada53a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d1315850-940f-522d-9257-230e4aba8d92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c5b40448-9a2b-5391-99ef-e75ebd7956ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1eec0174-8be8-562a-934e-fde1b99a5c85",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:066f220e-07c1-5c93-99b5-666e7984d3f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cba5b45a-1cce-507d-9963-92131de395c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0685ce2b-0c09-5912-aa00-5c442933c821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4a3b62fd-3805-5e18-b708-cb3e9ce6484f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:977813d7-ebed-5eab-8737-a569ced2797b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.3"
    }
  ]
}