{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c236de42-1648-5b0f-90eb-46b816ca511f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13", "version": "6.1.21-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b26566ae-10fc-5aec-8bd2-d8c74c019db6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.13 of org.springframework:spring-core. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c7289000-2a9d-56f7-9b81-f85f1331d543", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:d4681b35-7c29-59dc-908c-dbc06b9fcb8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:911d226c-9257-5a5f-9f9c-95e0ca345a62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:86cab324-7ea0-52ef-9b8f-8427207c3420", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:d254d055-a7e4-5f56-ba40-f0b7997448c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e022a0d4-8502-5010-9750-c2c29be5b825", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:61107ed9-f3a8-54ed-b229-b2534ed694f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:81150d31-5c28-5702-a795-eaf2a0a5df33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:5e183cf6-384f-586d-bb6d-b894bf2891f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ee621c7f-63cd-5100-bf89-5c3761f302d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:246f26e5-48c7-5241-b717-683f7ee39469", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:fecebf71-06e4-565e-a862-88bcdf93c06d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:237f238c-7dd8-5618-8993-aaba2d7ae957", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:7acfa701-52f4-5141-b55b-6440f297c2c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:72997aaf-24c1-5816-afc2-3223128ca210", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ce1452b8-8c64-5d8a-9073-c034b3051095", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:70ecf688-008f-5910-976e-c951ccd6dc17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:14316ee8-1731-5f43-a1f0-ead6e6a34b8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:7996b54c-f2e2-5144-881f-abeef2559067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f2075af3-f831-536e-a71d-911a2fecd014", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b3f3f5e2-8452-5981-95af-c17b44a2a676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9a325735-abfa-5f9c-bef5-b32d140a163e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:544f6c2a-997c-5fae-a6f6-12c3e832cd58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:118f49cf-dcac-5033-aed0-a15e29b9399f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9137d5d2-8a14-55bd-966f-2f0be8107ced", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:3b6b5a07-eb09-5460-b1cd-d99da2b42aa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:591d495c-1b30-52de-8508-4fa8de4dad97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c7b10ab3-bafe-570e-b971-8880b4bab418", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:53e1c0c6-5c2b-50c3-b75e-42942ff658e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:3b192d84-eadc-54eb-a910-192ba22245c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c2520d39-116f-57ba-af9a-f63a75479fd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:2a81e5cd-f1a4-5ded-8a2c-bb20ee1030ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:69b9f46f-0880-5b92-8541-91e00f9e66f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9f727463-3fd3-55cf-b44c-3da8365d01ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f4469a8e-56ef-533d-a95c-60bdf68f0354", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b5c52b9c-cd21-570d-86b9-049a28dd6e6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e1673558-f003-5f42-a455-bc18ed5cd666", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:7cd14c4e-0a45-5609-9457-16a7dcbb1c98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.21-tuxcare.13" } ] }