{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:25fe8d2b-4cab-59c7-83ef-4a0a88de9f2d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1", "version": "6.1.4-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:6aea9baf-05e6-582b-b491-ef0df43faf55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:162ffa24-bf97-5385-91dd-ba895af6942d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:6123514c-0757-516d-bbb3-1b92df03ba2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:5f23bd72-d3ca-5ed3-8065-b8c067bf6bf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:9f7bcbec-2f20-5c8b-80fe-0315847e96f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.4." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:f4fc7480-cd54-530f-951e-989e47e0c6c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:18cfaaa1-fb92-5563-9f1c-88c32a8ab22d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:6bcffaeb-63c8-506e-ada2-b7bb19589020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:262986fb-b6cd-5beb-8b00-7b89258e32b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:d23c99a3-6cc4-51c6-9006-a6d1632405dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:bf45d8b0-5b3b-5165-8e0a-cfabeeca8966", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e2ae0b90-eff2-56a3-a5a5-715bf41840c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:fd095b6d-a99d-57c6-842d-72432c6a29dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.4." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:3f0eca64-7da9-5872-9f7a-83351662cac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:69e7ad50-1b06-516b-a32f-7a351ffb694b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:81d07331-36ff-58c9-bf93-264a8c20246d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:2f005ae9-592b-5490-89aa-2127961256ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:c2f6cb29-deed-5617-822d-e4b3489f5e6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e6de81d6-122f-592a-8be6-7c481c789b2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:2aef359f-db52-5180-a344-fecfa4b40c83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:bd515ff8-8cbf-57a9-abcb-252284808b01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:6d70a0f6-1617-5023-b208-eda9da3a41d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:017d03c3-5516-5e9b-89bc-11a2c6659d25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:82f16d3c-17d8-5530-864d-d0251cf41997", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:64e4f5d8-7e4d-58ed-a00f-8bf2b9361d51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.6." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e2f17976-c1db-5b85-a82e-44ffc6a4843b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:fb9cad82-2f76-53ae-ae1d-c38c473dc391", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:69adbafc-aa72-53cf-a50c-31cfb42943dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:1f2ce1b9-b756-5916-9600-e6da265be5e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:0166bc8d-069c-510b-8913-2c929f70f089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:2083b631-e0ca-5af9-b40e-8d5d8db69d5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.5." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:c934f803-cd5d-5573-8fcc-694ce468f93d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:d3d4b2cb-ec32-53bb-b409-e241840d59b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:5dc744f4-5062-5e19-abeb-bc52351401df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:b16d8a12-a601-5236-bbb7-387fe75aeb8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:cc138cfd-8c2a-52e4-aeae-9ecca6cf3907", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.3." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:0071da67-c889-50d2-bdf7-45822ce313df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:6b1830f4-78d0-5286-8ef8-0c2a3f2682c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:bd6fa08c-8041-5a8c-812e-87043709a694", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:9879d57a-1ad4-5055-b2e1-1d42eb2c2255", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:364aeae7-41c4-517a-9e38-72eb8d50c91c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:e14074c0-b628-5c6c-af63-fa349df34204", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:ca16860c-e8a5-54bf-97b2-5d15cf16bcde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:5b4a40ce-8321-5db2-9143-99bb8cf6b494", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:b10de568-093e-57a5-875e-7a4ae7e37c0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ], "bom-ref": "urn:uuid:efea5ea7-2529-5ade-9124-befa9399ce63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.4-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.2." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.1" } ] }