{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8e9638f2-bc8c-547d-8867-f5310b763279", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9", "version": "6.1.20-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:d191e7bd-90ef-5c78-9bcf-1ffbc1816ba3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-core. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:ce21a9c9-6c21-50f9-822b-a97cdb77d74e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:e498fea6-65b1-5ed7-a92e-550342ba246e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:d6fbce67-2534-504e-8943-bcdf87109d0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:dacd295d-e9e2-5885-9cfe-e535d054196b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:40954524-8240-5ec8-926b-483118a42304", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:eb548f30-5c15-5855-ae3a-a280816d822e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:15a8d171-b4ea-5fa2-af3b-0f49b2b52b14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:4fa2d28c-8add-5bdf-af62-93f156056e67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:dd3a06bf-0748-5ef1-8311-f583fe31def8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:96761797-fd87-56fc-b827-972f725a3909", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:f12fe698-ca2d-538a-b584-59cf94e6b324", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:57d9c79a-96b9-5a89-be2a-4e053bc2bd9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core, and is fixed in 6.1.20-tuxcare.11." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:6cfb4405-c02c-5f9d-b773-1f20c2e290a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:b5b128fe-2087-5401-9d21-f69282a01a1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:187ec8bb-1a1b-52ab-be63-16deac72c90b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:11b6cd07-5ddc-51c0-b8cf-0447dbb563f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:01a8235e-f17b-54e1-80a6-30f9c593963d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:d7fdb64d-a447-5bdf-83cf-0c6a2a43589e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:d8c96b58-ef3d-5d22-adf5-4ac36d9bad53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:455f867f-ca29-5953-8899-533a855647e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:0becefe3-4f98-5c0d-873c-2231e14bdbfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:a806fa28-ae2f-5fec-b60e-b04702d1419f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:164a1d13-37f5-5229-bdf5-c10e9b38bc5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:1c84032f-1f93-5a3b-bbae-3222f76305f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:38c4d7ce-4be8-595c-879f-4249e6f25687", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:a06c6fbd-5064-5fcc-934c-9e1e41c2d9ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:6c88c138-f7c6-584b-ba75-142eebf05e59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:b30242df-1218-572d-8ac4-5dd5c010ec49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:aa4436ef-97fc-5c8f-af56-d5eca9546f95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:6faca6ec-22f3-5400-8217-7b4882e91207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core, and is fixed in 6.1.20-tuxcare.10." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:1684f09b-1045-5ac8-a88e-9b6ed4ffe12b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:448bcabd-2c50-5d79-a99c-51e3346c7881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:44645094-633f-55a9-8eb0-68e181fcdcff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:7b697935-bae2-5c6d-9bc4-6c74384a098a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:f5aec858-376c-5015-aeec-0b53aa796aa8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:900e42e9-371a-5229-bdce-dae4971b4662", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:1e6e1afd-db0a-5cca-8c31-b15bd0fec31d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:0d358772-9fd3-5eae-9395-ef7fa32b7574", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-core, and is fixed in 6.1.20-tuxcare.10." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ], "bom-ref": "urn:uuid:80006e10-8271-5fa3-b9bc-2f674faac3b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.20-tuxcare.9" } ] }