{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4a982ce9-9ba5-5766-903c-a3631216c61e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7", "version": "6.1.4-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1c7afb6a-6d10-5807-b62a-76bcfbd29b08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:46bbed19-e9c7-5253-85f5-22ee363d4eed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:0769d813-efb6-5c24-a330-133090d43137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:3a2a7b15-4d43-5d1e-8b67-c0594ebf13d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:ca95c82e-7cf3-58fa-a399-b9c37dd8a9ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f3a77d45-1e09-5f81-9dfd-a70751619a75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:d031d128-4c81-524b-982f-3954deaacd3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:bf91284e-eb7e-5daa-8197-cf73ddc9755b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:5be7f303-6c47-555f-8240-2521dfb3bf21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:054c6666-75f4-5d18-88f9-b777f70d9923", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:682ea97d-348b-503e-9e62-fcbf80f920cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:643b13e5-733a-5cd1-b7f3-9f4c0ef4b85b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:853b6dad-ef5e-5fcc-9a79-c9f59cfba7d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:fbb91b22-fe5e-5758-b322-43ba7740b0dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:974b0091-7d10-5918-8ac4-d9d376104389", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:09b46e6b-b804-56d1-9353-38608ac28896", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:e6db4b6a-49d1-5fb2-a630-898a7686ca5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1a58616f-c6e8-5d61-a5f1-e7bceafb8b77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:45e0c08f-5ccd-519d-9350-bda8a7d03bfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:7eed4fea-046c-5cbe-9ec2-16b0d76701bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:43094fdc-3c95-504b-a54c-f1d2071e29ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:e120b745-4ee2-539b-ac38-e6a25386f931", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:29e2f856-fa07-5e28-a6ee-c922bcd0cce1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:df6bfdc2-9c48-5804-b868-7c61463329bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:afb5bee1-ab90-59e7-b57f-e1c2d5a1f7e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:63094e82-f69e-5722-8de5-1da2eea58db3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:15c1b5c8-f13d-5a79-b0d7-462205579f06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:39816de9-7df0-56cb-8f5e-92d5aec7d92b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1d846a0f-db34-5473-90e1-6d34b6c877a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:7816db05-fb9b-52d6-b1ae-661e95ecadf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:13b631c9-8bcd-5dc1-b905-12b64d507c24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f0b5b973-c788-5d4b-b259-97fb6327b1f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c2466965-f1d3-582a-b7db-a581c270f1d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:22c834d5-325e-5e12-af91-2e9fdb7b8d8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f686fd1f-739d-5a6b-a8c7-569f6fec619c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:2f505f2b-fa2e-5d8a-aacf-9ebb1d6c31ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1304616b-ff21-5102-98b2-31f42d5b3c2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:d6008865-a647-574b-b3cc-134ff814a221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:2ab06a49-4bbf-589b-8c46-ccbce60d5bdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:e7c29fd8-9aac-53df-b860-ead966ba6f02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:a924cea0-2adb-5c65-85e6-3558c29c14ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1639e76b-dcf2-5606-8718-1f4b4a80b9cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:04bce10b-910f-58be-800c-27eb55e1d3b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c6e88b0c-7ff9-5f66-b1ed-54bef1983248", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:cc0b8861-311f-5d51-b7f9-c7198e16055f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:0ee1666d-fbd5-5e0b-a186-5a7cd61da412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.4-tuxcare.7" } ] }