{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2a7046af-02b7-5954-8077-1a3523c222b7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3", "version": "6.1.7-tuxcare.3", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:e9a27c25-39a5-5552-92fa-95d94773108c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:73a42f60-83a6-5a68-8210-a8a11f3b16b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:b66b5ba8-6180-5732-bfcf-568c9820369b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:8230080a-f431-5409-97ce-c517d8937801", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.7." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:836f2f02-3301-5761-898f-54e7d5a2deb2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:95753e83-942e-563b-a849-adaa521e02e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:7d23ee09-5202-5bb6-a953-2898c2b6a69a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:a87ce622-97be-5c3a-84a4-b868d20d7f0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:24cfd75a-9f6f-51b8-bc03-4a3d203ff667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:5ba83e2e-e147-551d-803b-b3a7577eaefd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:d58e4f0f-878d-531a-9627-0ef5fdabc9b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.4." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:1098c15e-4cd5-581a-90d1-ff4aa7410de9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:c0375cd8-d954-520b-80d9-fef37dc99cec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:b5972909-36c2-5486-b191-9b71f9422868", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:ed851aba-3fbb-5c28-9e7c-c5ace0fc6e15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:5cec581c-f482-5875-826d-c7b92c68b541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:7c70d138-674f-5cf0-bdf9-7bb9127a6b7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:65733d7c-8e01-5eb3-9b6e-7c19cc44eeee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:4433293c-cb44-581f-ae8e-79a31e837600", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:f05f07ae-aec1-5b3b-abcb-401e5627ecf8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.5." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:50aaff53-50ed-53ab-ab4d-4c4a0b945e88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:a84a7e58-24aa-5b20-8e80-ba9c1d7e113b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:26a82739-41fd-5a0a-882f-d8f0b17e5341", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.6." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:4f31752d-ff35-5feb-b614-6976c91dc333", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:31b82084-7219-5507-89b6-95fa1bfa0b4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:ff1bb7b8-e378-52fe-9221-820cbc0372cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:6b3f43b0-09ca-50e6-8391-9ed0c6c0256f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:42906a1b-89b8-548b-8907-763775bdca45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:bb31b454-2cba-5950-b064-3db9826326bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:9685dab4-467d-5700-bffc-60bac09f2346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:44b4fa47-0eeb-5fdc-b8d1-3e66a1bb5b08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:95b0e9e5-4c52-5ab1-a6dd-0841abfb19ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:9664cd01-0709-5cb3-9a66-9eb2acd0325c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:04dfd966-16f4-53d4-851a-21192e04f806", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:31746a39-6c62-5a70-98a5-b4f5efe685d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:84c03ab1-06cc-57d5-9741-2286ed2e5179", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:44d43169-4368-56b5-a1ab-1a9692c79950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:3a1a22ee-a4b4-501b-a131-00ca352366de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:17a83b90-5fb4-558c-9699-ec21c8efdc4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:c37fd091-650e-5f84-a55c-6ba269f9e4a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:46dfb7a6-734d-5374-9871-7125500a9d29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:fc5f0044-ef30-51ae-bec1-eb51a6395122", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:3881636b-fd9b-56f9-9f35-c11874575600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ], "bom-ref": "urn:uuid:100630b6-de58-553e-b304-33f0b66aaa78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.3 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.3" } ] }