{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:75ba9baa-dcf6-53a2-8719-aecd6395edbc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2", "version": "6.1.19-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:c96ae836-4cdb-539d-b065-a45c46bb8459", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:6f523546-1772-52bf-8baf-d0e8f05de55a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:0954e089-7551-5c4e-8ffe-bcd6741e1d0d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:6b013fe2-d9b1-5b98-92ee-8ded8dca8919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:a515a276-a868-51bc-a0ba-44cc6b6ebbb1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:13888842-931d-5929-bbbc-2573128959ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:4f843d42-72b6-5c0e-9451-81752c84056c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:d501ecc3-62a2-5759-bb0d-14d3eb6510e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:cf349943-f457-5cd0-8830-a5e2061b4128", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:a28ae481-0ff4-54b7-bc4a-d765a92d76e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:fecb8491-d132-56d1-b887-4aa1136fd816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:0a3804a2-af4d-5b82-b71f-33c7c3ce3697", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:b541c4fe-1992-54ab-a313-a516858f3541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.5." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:f8899d25-8741-548f-bae7-620e61789560", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.4." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:52b50680-73e3-5819-9a92-1b16d1f5a0e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:ac95f4a7-b0db-5e98-849c-7145eadb2016", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:a13eba3e-c86d-5fc4-8522-5db4df5c4189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:1f229349-f2df-5dee-9425-c3a63d04faaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:7affb217-f83f-55ea-aca9-7c4efba12e78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:daa93d67-7a59-5ae2-a49b-33c112ecc4df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:0eef2a2c-5b66-5f84-b334-8db2215b856c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:7bda6009-d203-53fd-8e6f-813e3c959f53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:e762f480-4cea-575f-99b3-344dcd1058f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:2a31b26a-369d-5322-8c14-d618c54dddc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:23d6b672-e54f-52e7-82a9-4988d30f17bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:507ab0f2-06d0-5279-9d02-719a84108922", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.19-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:b4665867-f44a-51af-a9d9-ab91e59006d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:0f506677-61b3-526b-9042-6523c5a820a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:57494700-f85f-5b09-af9a-7c05c32f5bcf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:98915fbb-4197-5eea-9fcc-68dc41d4f78f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:c9c95566-f494-5bfb-8595-eaba73178d56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:2178d94b-968a-558c-9de4-7a2f9e62d15f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:be272597-f928-5f1e-9592-9d12b2194da1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:8e849ba7-1fd2-51d3-953b-b96c7ba715c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:1f51b67f-eb16-555a-b7a6-875d80a1f541", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:8fe996e1-0d1c-54f3-aef0-b08f97d4643e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:589f512b-b926-54bd-8790-7821dc88419f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:8441fce0-6b68-5ef8-99e1-e4124401a6fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:0e34b578-7508-5eae-b82d-a42c9e6cd2da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ], "bom-ref": "urn:uuid:0679ad6b-da9d-54bd-981d-1dddc21d2be7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.19-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.3." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.2" } ] }