{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:50dd52dc-792f-5c13-a0d0-b107aef7c10f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4", "version": "6.1.7-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:63295f4f-8fe8-5051-9384-20fe4cd4258d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:f15df477-9676-5800-8dc9-fd355f820d48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:89385204-f224-5204-9fca-b133d771e575", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:8963143e-d0aa-5cfa-89e8-6c1e7ab09279", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.7." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:71d877bf-d975-5ebb-a965-9789c218c2ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:2143be72-1d31-582c-92e9-a0784136679e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:1382fbea-07e5-56cd-aa84-783b15a13483", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:6a905229-82b5-5604-93a2-66bda765855e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:f620f25d-502a-5e5a-81d7-50509b1d5da6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:99d92433-70b5-5f0a-b977-c44dda2d142e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:52fd6f91-cf90-5358-9591-d188c16dbf17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:1079c8b4-f48d-5506-9a10-994e6d6245ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:bfed99c3-974d-5899-8dfe-463e9fae413d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:d954d6cf-0128-5a4e-a4b8-a5b1971c18db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:714e3b24-d86c-5bf7-a1ed-eb45aaeeb2c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:c2bce8da-a558-5c74-b83d-e3b1c2271a8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:9670583b-9075-55b6-94ce-de26da27fcb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:d191d948-cbc2-553b-a3d1-9455331c9de9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:5ee40fed-0496-5ab0-8c76-191ba50ba492", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:255284de-ecde-5708-b8ae-e1d7bf89c388", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.5." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:53041632-8c61-5f74-8435-0479d774872c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:217da479-70df-5ba7-a322-d9ac95bca448", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:6c602817-f14e-5b69-aea5-8ad7a04ae99d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.6." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:4258c9dc-094b-51e1-8bbe-3f442ff09ddc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:d84900ea-5f8c-5aec-8ed7-9386ebb92c01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:1b7fbc23-aca8-5589-9439-fbf7decd7682", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:f6e41c26-f140-5ab1-b225-48c9f587d9fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:7ab747ab-cb61-5910-99ce-59197363b3c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:68206b3e-4f38-51de-be29-32f1f571f651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:77f67eed-a660-5d8f-9fef-e45903a91355", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:0087895a-7a44-5a53-bc88-435c1ab59e4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:6aafb71a-efcd-58cc-81c1-2dd0f025cef6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:d7dffbe5-6a4a-541d-9290-65fa80b3355c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:4bce4358-719c-5ca0-8e06-2c512f0c8bd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:2f402a1a-d610-5669-8d2c-016e7557c26d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:4d82d77d-074a-5d9e-bfe5-f45af7868876", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:0bcc1c55-2cd5-5888-a35a-56bad8241daa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:b040c6b7-d543-5f8e-a450-0962b724e0c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:4e032bc5-2590-56ac-8dbd-eb31f2efcefb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:b69e7007-1a37-5215-a12a-d59918022edb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:fcd4e353-974c-5e7c-97cf-f3cccbb88025", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:dbba7328-912a-54c3-88c8-6701c17a64cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:0ce740ad-21a2-5d48-bbeb-7ec4a127299b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ], "bom-ref": "urn:uuid:e00219ac-5882-5ac3-b223-27a4070fcf1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.4" } ] }