{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d7e4ef60-ec78-5092-8fd9-c407c3b5df03", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3", "version": "6.1.4-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:16f760c7-6504-5e81-919d-10c64e8b0c58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:7f523d13-ae2e-5728-9eca-5208132a40cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:57316ad6-4359-5104-bd4e-493920fcc8de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:894e3cec-58a7-52cf-96d1-1f27f633e0a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:f17607e5-1059-52b6-ba65-823622a90220", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.4." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:b7d1283e-8ad3-5483-abb2-144e46b55167", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:e879b4d2-121a-576d-b197-d0b16df88595", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:c8c91a61-b6f2-5b0b-8b0c-5d14d572af71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:90fbcdbe-b216-55ec-92b3-b28746c27cef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:feee4736-51a1-52cb-9a84-af7576c3c5b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:4b28a24d-5dbe-5747-9dd1-b0c50ce02004", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:3b1aa91a-b874-57c4-accc-44f605366e4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:acc2edc2-f699-5ae3-bf4c-f12845447dbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.4." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:3d010eed-8d3a-5925-b993-a03f9e3479fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:80c66459-214b-5893-8b44-1c9b8a77f81f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:6155f6dc-ed1f-521f-98e7-19b396c59961", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:8fc2fdeb-a73e-5639-8a52-1e285598eeaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:30d66095-89a9-5745-a75a-22b630468dce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:17dd6902-d284-5422-8eea-17c811c35960", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:bd434e50-3db1-53b9-81b5-58a0fe450e97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:1a2a980d-bfee-5632-adf0-29d6b60f1f32", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:88490b1b-e25b-576e-b43b-616b31e6c842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:746ac4a3-b42a-5326-a9f4-9ad66614733f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:6f3663b9-c526-5efe-8580-de94c608e7cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:9b7fd8e1-163a-56ee-9bab-8b2b3c4c4299", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.6." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:1f817e63-f23e-54bb-b7de-1eccc825ec9e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:e762d791-4d9d-5cef-9e6a-45f291044e97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:9222cb5d-0114-5acf-8f54-7401d61ee6b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:331c1af4-17c3-5de6-9602-8fdc64cc1611", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:6a72859c-4704-50de-9f52-5df71eed1cf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:3cd48bc4-b5af-5af6-a56b-83f217e44195", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.5." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:2d459afd-bfe7-5b81-a517-e278046f04c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:8a06911c-ee4e-5e9a-a69e-1532e40b599c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:45b717a4-fe85-5668-b7e2-1988d567f33d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:fa8c3edf-16e7-58e0-9407-19e056f04942", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:d3457200-0573-5097-8fd5-2e1d9846bd45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:9c2c4fc8-46de-547a-815d-4764e3e6a14f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:2653befe-69bf-535e-bec2-965f30c67ba5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:10ca7a0f-dc1c-5046-b0b8-dc6106e22417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:1bee6f96-a8d7-57e4-9eee-1dd0b5332332", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:eee8459b-ca85-52e8-ac32-a520f9588f81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:86ef0a70-11b6-53c3-9fb7-caa20d640eb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:f59bbc2e-af8a-5883-91c9-37d2eab4df4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:b46fed02-c562-57aa-9e69-16924286d973", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:7860c82f-b1ad-5580-981f-2e6470abbc4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ], "bom-ref": "urn:uuid:6c4208ce-e768-5921-adcd-8685a5fcb5d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.3 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.3" } ] }