{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c10ea9f1-7e8e-5e36-a49e-feb160d56433",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4",
      "version": "6.1.16-tuxcare.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1fa983d7-35f9-5c2a-ad5b-ffad0207966f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b235d526-2154-5e60-8cfb-83bb41323681",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2ff805eb-2ae9-5515-a28a-97b125f17987",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:784e86c8-7be1-5bbd-be73-ab0156934e4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:189a7852-bd29-5bca-81cd-1127a2814ebd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ec76a768-d9dc-50bc-9deb-6b97cdd5a784",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5e7007bc-4d04-543d-afc9-d2192832c743",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0bf6a71c-553a-59f6-91e3-81c20ad43ae1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:62c70c2e-e055-5367-9fdb-118a3c393644",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f4f80a8d-9ac0-51d6-a731-51cb4470810d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a792d893-4b84-5fc8-ae86-24db2e4aed50",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:19c5e4af-8f89-575e-bef6-2690f44df961",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:74b38770-5e74-56a2-920c-0d1c1a673b34",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f56ad5b8-5db6-5030-ab9b-c646365f9e17",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f722dbf8-9a95-5d98-a4fe-97b77d36208b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:da09a53c-e363-51fc-89b7-87a43c217c5e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:384311df-46db-5d4d-9adb-032734f22450",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:147a3890-aa5a-58bd-847e-8dfbf689ca04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7c5f1896-f57b-5bd1-b86a-49fa088b395d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fce5fe8e-d578-58da-b7a0-ab1771300b3c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ce359914-51cc-5741-9e43-c7376a5b153f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c05336a1-7a30-528c-b6ed-8ed8478bc87f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:98ad07a9-14c1-57d9-86e4-756137ee6616",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:89348fd0-ec83-5fb3-bf9b-b940c6cbed07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cdd8d8bb-acd8-514f-944a-df5885090f5b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5e920d32-10af-5b27-b9ab-1fde37deb532",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:27fb5f29-3fcc-5aa9-8983-69118e378e76",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2e9613ec-372b-5d85-a80e-05c08c1e6573",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6ec7403b-5983-5f10-a55b-db73e8ba15d1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:091f14ac-8ea0-584b-ae2d-08b84a417d33",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3c94f7b4-ca99-5b8f-815c-b386161e1fbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:956efa0b-a7de-53e9-a5bc-4cdf9aebfa7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:90fc2026-c4e4-574e-897e-33463d95f0bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5ae5ede7-2109-5965-8fe4-669d708a8a62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4c74258c-5670-51c7-8750-5708365dd54c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2903ae0c-6de5-5f3f-b733-afb96419115f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:afc9a6a1-ebe9-5df7-8382-327414027c5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:93b3cd3b-c7c0-5532-bdf9-12ef45901e74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fab40dba-dc9e-598c-a65f-55cd5ce9c174",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7ed0f586-1735-526a-9148-66cfc1629c15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.4"
    }
  ]
}