{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bd7481f4-66b5-5aaf-b8c6-5a6ef2fa35f4", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0533bc06-a530-5ac3-81b9-a04d8bf64063", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-core. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bebd0cd6-e074-5a3e-874e-7e617e7238f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d195f7df-88c0-51f6-b200-6ada4f868b3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b54d4678-bd49-5def-848f-02edb6026601", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e984406e-9ed9-5595-90d6-5daa0e4c963c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b195f241-7694-51f7-aa3f-1a6910957721", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1a4180ed-c74d-55e0-a278-923a44d52cce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fb6fafc9-5a9e-5d57-8482-b374172f4586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:84d78b75-25e5-5002-a410-a86541058564", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b25ea6b3-f0ad-5d2d-b89d-51fa1d62b806", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e57843a4-78c2-5415-9f00-48e2e9b96bc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:16cdea40-2e79-5870-933d-e68ea963f2d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0c424c68-b088-551f-bd57-5673dfdce330", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ad9075d6-28b8-5477-9593-f41fc2d35c75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c90a2a0e-8836-55c6-b90e-41fb461a3572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:36d379da-7ea2-5954-bdc1-f39f2218b21d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:53413205-b0d8-5550-b12c-afea7bcf1d1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:318e0cc5-fa46-55ea-a46f-e8d867ae6912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0e745c30-afc5-5656-9996-b3e251e65a7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:09a4c5be-ebc2-5172-8a67-78493369a00a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c71c2072-8dac-5ffe-b6e1-335b62513e44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ae2e54ba-1e94-53c8-9fe1-6aac4a1d79ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3b27ae6a-a571-5e03-88af-584db16fa899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:539b25fb-6072-596b-92e2-ec588466fbbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0b1b81fe-33ec-5868-ace5-de8c951cd4b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:dd4a4e4c-04c1-58c5-8acf-03c5a2a5e108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d80bf7fb-e331-58e2-b76b-4207fa67e093", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1987b57a-399d-5666-908d-99f8d7c717ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:51405aca-8912-5478-8c51-44ec3765516b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f2f3172f-cc3a-5454-b66e-da84051b1978", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7fe17419-47d8-541b-8252-0c934365a3bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:31be79ce-61e5-55c6-817b-008eafd22f46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1906a57b-b29f-562f-842c-073c5ff58b6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b5151d34-5a48-589b-bc4f-3ebdca8aadcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1a965b87-8901-5a16-9ee7-dc8584808bc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7cfa2998-64d7-58a0-8678-12c94183735a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d8f899db-4d49-533e-9f39-0ace2b86a93e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:341508c9-fca8-57dd-94aa-a6a82d13f30f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e10cd548-4f92-58a0-a671-41331fe80c72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6bdd0971-f8ab-5c70-a648-7f2815c15f4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.11" } ] }