{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0f70a65e-fbe4-5c94-b0ea-511422f3ff51", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5", "version": "6.1.4-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:4ccd9da8-3cb3-5f0b-909b-59435fb19e8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:b761864f-818c-5626-a8d8-ef8de4b52ffb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:7e362f6c-660a-5a9a-8333-63918e92c46d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:c270960a-2935-5d50-aca5-18d8ad08d8ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:32035f85-5faa-5acd-8bce-75f5289c3600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:203e6277-a67e-543a-bd1d-c28ec6863fe0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:f14bf71f-9926-50c2-a3cb-dc3c8d94d8d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:61f34278-5e0f-51c1-bdf7-f7543253369f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:d3046a65-d792-5a4a-a406-3fa0f9ff0bc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:ea8643c2-9ae4-5f2f-a684-ce961157933f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:b17a423f-ab03-5cb9-94f4-73fd056bfe2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:edcc40a9-028b-53a9-b6b5-682190e1ed60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:f89d47a0-874c-57fd-9114-5e5b93a41588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:92848af5-1e4c-5575-ab81-7d3438c14b66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:80e7623a-cd99-5cac-ac4c-9a5a3a03a548", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:8ed30409-0b27-501d-8edb-cae33994e45a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:53508254-805d-5ed8-8b00-f748b9077f97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:929e9cc7-bc10-5288-9531-89ece4e9624e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:c42ecb0d-c49b-5030-b275-91a455f19510", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:6c3970b3-2709-5687-8081-e52388d2a76d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:0d2169bb-5cf6-5cf8-87ad-f89fcaa882eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:35bf7778-2dc8-584e-a812-c23d96e3f08e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.7." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:f8902f94-16a3-5614-a677-bae4c712f4cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:bf90ff07-070d-5892-919f-00e8f6b8c6dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:05f1ed41-0a9a-5686-86b7-8344524fb1d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core, and is fixed in 6.1.4-tuxcare.6." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:ae5de4b2-108a-5afd-8d8c-5d7ad7b0fdde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:6195c24a-8a92-58f8-a439-cd25b49c3036", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:349429fc-f016-5300-8c82-daa199572eab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:53a9fb65-d0c8-5483-883a-1e6e9d98525d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:e11983d3-138e-51ea-9641-061a73e5a8e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:26c2d9d6-8c1c-50e0-9365-87a23d32aa51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:b68fa544-dec3-5c8a-bc32-c472fd1c18a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:c9f63e14-0ea1-592b-bf6e-4ac626697e59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:b84eab39-b858-571d-bb5e-186a03157fc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:6901d44c-1018-55d7-80a4-4c4aad83c377", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:9e89dfe2-8f2d-5bd1-b905-b2cb15690727", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:7629fcdb-85e2-59da-ad1e-e9f0eed7de52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:6be3ceb9-30ec-535b-92ef-af88a6a7ca76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:0c56a249-d242-5a99-b56b-ef32b9fb9707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:1a80a2fc-84ed-514a-867c-254cbdd6b6d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:05b632ac-40f1-59c6-9437-cf66faf82fc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:be508770-758b-5c56-9fac-9757d39ef920", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:1f981bd2-a189-576d-a4ab-8a8abcc2cdd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:eec8c4ce-8cdc-5a25-b420-347bf8cb59b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:1d7e05f9-784d-5c1a-83df-a58374564cc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ], "bom-ref": "urn:uuid:b2c0851f-ef9d-5453-a67c-9a1f4c4ff059", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.5 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.5" } ] }