{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6b074a78-18b9-55fc-9049-3510e4c005ab",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5",
      "version": "6.1.16-tuxcare.5",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5e83743a-404e-53be-9ef6-11e64d2d6fbe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6db3a1c7-50b2-58da-a181-cf827ab26ede",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:26dcafa7-2de6-5ba1-819b-8e5440b2ed8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:765af0b2-d2b8-5965-b8a5-1918267a7538",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:03254529-51f5-5998-adb4-cf81579f64d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2f126a08-c486-5868-85eb-4e119f26ad1c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:373d8974-6f80-55ba-a6ee-b4a36fadbc20",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9d76407d-0235-510b-82b0-a80ea39084b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.5 of org.springframework:spring-core, and is fixed in 6.1.16-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:39006a9b-b2cf-5550-a135-027820fe76fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ca47e339-afe9-59a9-9197-78a357d348e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1e754ad6-c82b-5426-bff4-ba51c948d75f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:62327a94-0fc4-59ee-8df5-03b65f085d1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0c2a9818-19da-5b5f-bb7e-b2e7cd161b89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5508696e-a17b-5f06-8580-d95af758acbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fb5be33b-1eab-5595-a064-1f5e4bf88150",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fc0e3934-8f6b-54ff-8466-f7f3d0700fbf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:23723c89-9723-590e-ab39-4904d20b8162",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5c73d288-f1bd-5105-b62c-3468f2e05295",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3e9ec41a-2021-5cb0-9b62-a6f9c70ed9bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:847c89ca-5aa4-58cf-95db-de598b355c8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3e83d129-76a2-59e5-b953-5328be0c5ccc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e9d6f7d0-16c8-5788-b98d-c9a07f9ed9d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cc1d1d4f-acb3-5c69-866b-c9e6b698fb91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:862c8360-aba7-597f-b3fa-525b4b764d6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0c211c07-fa95-5c65-ac1d-6cee7a8ed979",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:580e296a-4408-5993-b91e-9d7e0bc68095",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ca1436cc-bc34-59be-8da0-2eac9b641464",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:54949313-bb0f-5721-9a0c-80c8e152bb24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a2fa2562-6130-558a-bfdd-ae3a4cfbdc4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3fda1fbc-4868-5084-ba92-bba05f68370a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:22172be6-d4f6-5746-a783-efc5e58ab63a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3599ee74-f547-553c-bcbc-8d3e9845e9eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6214bb29-ac95-551e-97e2-00c21d03f4cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:460383b8-d429-519d-aeea-d57f60dba933",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d21e3f57-c45f-5e6d-bba6-8645d95badb0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:123f0644-ac87-5187-a039-778ffc8683d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6b33dcbe-257b-533b-8ef2-41c98e7f765b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:20a0a819-8c29-5840-b532-cee89a7048a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:76e87250-7f5c-54e9-8fe9-422af44b1ba1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a0848d52-bf5a-55fe-9ad5-9e3bd1693258",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.5 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.16-tuxcare.5"
    }
  ]
}