{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bbb62cbd-12d3-59c3-927e-b69302e5dd93", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2", "version": "6.1.4-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:3fc484ae-6a91-500c-b52f-29746f3ccbba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:9cc3f3c8-9ec8-5cb5-b7bc-57bc55a0a6fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:38cae257-4a83-5ea3-b46b-d51a5a1b39af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:49129dfb-5907-5a68-a651-332684139018", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:3a80357a-6f2b-5f58-89bc-a333c5b098e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.4." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:c6918136-24f4-582d-b4ad-4757a4835ce1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:41bd229a-201e-5a13-8c23-0d89464c992a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:e98b12b6-29a0-527f-a6ed-7f1c4bc6ac49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:77ddf404-0cc2-5029-8df0-a720e9ab324c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:b965bce4-53c8-5eac-9cd8-29aa9a1ff4d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:5831e78a-e1ce-517b-827a-7face9057d17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:76fdc2ed-27d6-542c-9e16-556f32009fbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:05399e1f-8739-5461-80a1-a3a0aa0fcf52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.4." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:304393a4-4cc2-5b82-88e7-4b657730ea36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:cc4743ee-2c6b-5637-b888-1bb57b144f32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:e61dc3fb-ef11-5494-a741-2893ff1d564d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:fdb0e9db-e11a-5900-b037-1c81cc6d1de4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:a2795b61-2910-5010-a80b-2d0385005945", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:b673c17e-c0f5-5453-b7bf-bbb02ae6c834", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:91add1c1-c5b5-5e64-98ba-63767d8ae06d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:a6d1193b-3b9e-5861-9056-b576e912c268", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:1e7e8ad2-5868-50ed-8402-d0ade6c7156c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:2fa2a6e3-4cec-5fb2-a839-613e7bf38b2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:b18cd1de-b4a0-5aa7-8f40-2357f56dcca0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:f734b82b-6348-5539-a663-06540f09fa67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.6." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:d6395b76-b431-51be-9539-908542d1d436", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:cda0c066-b550-587f-b6c5-16dba32d00f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:18258874-9142-57e6-99c7-79074c0f8e28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:3d0dd353-7a87-5d56-a492-21133d745c03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:e714abe5-4da8-58c2-b33f-685f171bc73a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:d60af835-c8ec-5016-8712-472de5e23639", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.5." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:dbcd2c6b-3cbf-591f-8206-de46917b2d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:43ca33d0-d016-5450-bbaf-0206fc8d7c7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:d48d2fbb-2dda-5bf3-a2ed-dacfb9491368", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:d12164cf-78c7-51ef-90f7-01d786b1e8ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:d8e77ac7-e60a-5f28-8c3e-69ca1f53bd8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.4-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.3." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:d74daf1f-0dfb-503e-ab72-b02465c5550c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:2e0e56a1-4fb6-5527-a6a7-77ac6760644e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:878567b3-ad51-599d-ad98-6fdff5c60423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:290d750b-03f8-5bca-a5f3-0ad4b5179331", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:9d730cac-ed60-53de-9b00-cdef71db56a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:a62ebdab-b27f-531e-a8f2-dd09629387d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:23dfe327-9072-5690-b9fe-c52a2aa58865", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:5db2480a-6229-5e71-8228-11cb05162808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:029f32ca-c770-5a6d-9509-12fca391892f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ], "bom-ref": "urn:uuid:714ce97f-745e-5743-8309-1ff04bc123c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.2 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.2" } ] }