{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3a635284-d353-545a-a8fe-24c6bfeea070",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3",
      "version": "6.1.19-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e049c1a3-2438-5327-8923-e3e81578ad8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ea088c8a-d260-5973-82fe-c987636193ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d3da9202-33d2-56c1-bebc-9f77bb4ba06a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:edccda77-b98f-5660-b653-99163da2c211",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a083d78b-4a23-5d0f-a63d-ef63b4a40c49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3a54ed25-52a5-5073-a94a-bd4cd791f763",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b2e09c9d-51ad-5029-a4fb-eddb0bff6d3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d4e8e6e7-d28b-52de-a48a-bd105985c8f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:021f2c22-ba8c-591d-9cf1-2ff8becfc061",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0a6924d3-0136-535a-9a3d-1e0aaafda5ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f71490e1-8459-584d-a187-0038a682d493",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e629650d-9a43-5d34-b445-9509f8c4a8d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:30fab0e8-4426-525e-a840-b1601557273e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.19-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:85fc77ff-3dbd-5a72-b1ae-0bf025a81847",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.19-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.19-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2ef21728-7cbe-5121-8afb-965592ded834",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04efd6dd-5fca-5361-8301-282d0643a5ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e6e11c3f-319b-5c6a-951f-57e70fc2fae4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:049dc960-3775-5a44-a7c3-df755fee0465",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ba8817b9-145a-5926-a59d-04dda7978641",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:173f9388-62c2-5d55-a624-60e6953aa010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:034c68a7-85e3-5b3d-8d5a-816198fe5b56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f459602b-7610-546f-a6c1-c5827876df7a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0bd79dff-c8f8-5ea8-ba5a-c3556b9cb957",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b85df924-f1ad-51f7-ad12-2a8533fc6d6d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:85e71309-eeb9-5ba5-bf87-b44b5c092020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ba24f034-6f54-5c00-989e-c206b8527771",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f3e3ea0d-b550-57a3-b291-b43f3f3d894b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0d9fa7e9-f951-55ae-8861-5f918ab8acbf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:35884d63-62f5-5fac-b4d0-1557e06babea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7756ddf3-b808-5ec1-80cc-6ddf8e7f72a6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a9e3123b-056f-5d4a-a0e1-3868ff3d0456",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dc0e7326-3a89-5720-8ae5-a7967b84cdc1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9cc5bbbb-3938-577a-bbfb-70e03820544f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:347881cc-6a4c-5ca1-a7db-7caeb4d830dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:68b38f11-81f6-5285-bfd2-ce433f89438d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ccce6b3d-9d29-591e-aad4-7e9b093e3d30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aef2a33a-1c72-5f0b-9915-aa85ca13c206",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3409328b-1366-5556-9d20-b9f7e6ee0ca3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dd0255a4-f413-592a-b959-2d5c1615c034",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d6b482cb-cc4b-5f0b-ab15-b6d806c7b77f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.19-tuxcare.3 of org.springframework:spring-core."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.1.19-tuxcare.3"
    }
  ]
}