{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e9efa87d-2468-50a5-90ae-3567eacd46db", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5", "version": "6.1.7-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:abae2615-5a38-5293-89c4-887cae00e5d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:ceb77a80-d561-54ae-b19b-015799c66fe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:59257e3c-e132-5f5d-b775-16786aac6f0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:a682c4d8-81d4-5e26-a9c2-d8694a740cbb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.7." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:1a24fd28-0fc2-56c5-b6ee-6c583662cc99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:468f875a-0f86-589b-9e3c-dc0616b6f568", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:0758e4fb-16be-5d2a-98b5-499b65d8c7be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:6a51bfc8-791a-5cd1-bd3f-5012e9a839f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:56a3b0c7-c9d8-5067-90ee-aeb144b8057c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:65b30500-7c52-5b9b-afb8-401feb9ea341", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:a544dfc2-44a7-5d89-817c-5a6f04d97005", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:9c85ff0a-6e5e-5a09-bace-3f4fa342d3a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:3c48fd11-4c9b-5851-98cb-cf13b5b0b799", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:cff4ac28-d107-58df-976f-1373d170d39e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:820ee003-f6af-56ed-95c8-b29243c61570", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:02799173-60f2-5c2d-a4d1-cbac79d23399", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:2759dcc5-08ed-55d0-be44-dd9d6033cc41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:df2c999f-4131-56b7-bbf4-257cf1276125", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:4bdcca4f-3c25-56cf-a18b-a0d1a8d2dc21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:3069fe19-b9f1-5e10-8deb-98b75e8eb239", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:d1425921-5f1e-509c-bb5e-ea4a29ae76f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:e9c2a771-745c-56e3-82d6-473cf09d2c6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:0090c95c-d984-57bb-9581-4254c0467ef7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core, and is fixed in 6.1.7-tuxcare.6." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:9c525709-ac89-577c-af6f-93574d8dc1b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:90b8cd6c-c033-5c15-a378-43d4f6afe1da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:8025bfa3-eed8-5d4c-a07f-8446521423bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:160afb04-057a-583e-8b8d-f75a13f541b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:ee4b7ff9-88e1-5abe-a503-ccf4eb3e7c6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:f194fbe4-b959-5113-8f02-2441b1082559", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:658db7fc-03fc-5d59-b690-24f2e8f6247e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:fb3cb7b7-25f2-5edc-848d-24350318f5bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:5dc17b85-2ab8-5199-82fb-cb95aed4ec7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:c9c91a94-2cab-567f-b9cb-3f18724d3bec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:1c17a19a-bceb-5a2a-a32d-f06d97eb641d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:b9f19ce6-6707-5e7a-81c9-f381137f4c90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:4b3670ee-6402-5125-a442-87155ab8461d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:16c7d577-43a2-588f-8698-1aaa8d475c78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:75cf6e85-3dd8-5303-ae71-dea6f62f906e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:26244e04-fe18-58ed-ae77-af1af814da71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:580fc231-06d7-597a-82eb-e731ff00120f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:81beef7e-e498-5c51-ad9e-3a2de3c233b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:60442cfb-a2b6-5f30-a147-48e545bc6b17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:2ba19cca-9ed4-53ab-9541-f62960209f5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ], "bom-ref": "urn:uuid:9f04a85a-1776-593b-8452-d1246eabad27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.5 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.1.7-tuxcare.5" } ] }