{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0348b795-bb2d-529c-9498-bbde3f58a10b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2", "version": "6.2.1-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:fd8ac43f-e48a-59b0-afb5-7cf69ce02409", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d145f2ea-7610-5f71-bdc7-addb86b2eae5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:f78c9159-4021-54cf-bcff-a0d543378f70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:f092f633-34f9-5c1f-8521-e72cb602d5b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:371c7a2a-00a7-5e45-9fec-86a9d9200c41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:13f153e7-e140-5ca3-ba4e-ccd3a5a36758", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:289616ea-86be-5245-bc62-b084127f3df2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:55d15502-5ad9-5933-abb6-0826a80262ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:0978bdf4-5335-5c54-86bd-702501c25159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:7fa090cb-64db-5498-963f-84cba7fa7411", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:c98ac943-7171-5a8d-a706-a32d3ef776a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:471d0610-8b4a-54b0-8422-c89f2231557a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:61c5e5bc-207a-5565-bd7a-9693134911b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:6b98e032-f425-5a11-b8db-602da3d26b44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:7079de87-92e3-5fa8-9feb-c4378a0aa98c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e714a1dd-0f1c-51fc-9e50-a85241397aee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:a50df0f6-04b5-518b-a516-a36853b6a198", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:ed0defec-c480-586e-bdaf-c5c4d8ca1713", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:4a53f9c0-99cd-5d28-b01c-5722a7b1f7e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.3." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:5ce8835d-cad7-5351-98ab-fab2e15b06c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.5." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:8054c892-ccc1-5fc5-9dd3-d342a60130ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:5bb32c57-113f-5f78-b8dd-38d06f15183e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:c9d19ecf-07d4-56fb-8524-f712b640bbba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d6d305c8-f4ed-5df6-981e-be56632a1226", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:d8e96db7-e27a-5e6a-b853-20dc8cfab876", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:1fdd6d25-810e-5c11-be9d-4a1e4e410cc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:822678ac-6010-58e6-a45e-daf37e27252a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47883 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:74faae0c-2e93-5db6-9f06-28a8b661d231", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:ed407c28-0bf4-5323-849b-5c70f6300561", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:cf5505a6-f3d6-5d13-954d-3ae69820f4e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:a1d8028a-4cbf-55bd-8e33-b4af823bcaf6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:920f82bd-543c-5f94-b57d-a6dce68700c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:e84634cb-ff4b-54fe-b465-59146529381c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47889 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:5ef30b75-a53b-56b5-b11a-99e1fb5e6e8c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47890 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:388c750c-faaf-5857-8e94-b48b1edfd984", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:1ca96b48-a575-558c-8963-8fe1dd737d22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:88f23941-7b42-5d43-8a48-774eee3d9ecb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:db88068a-8fee-58d0-b45d-58bd4878b56d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:6d5817d3-be70-5962-b389-a1e884608946", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:287d1c64-1a59-52f0-a755-5495ef00e649", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:3e2024a7-3b44-5c5c-a43b-b5c8279b9ebc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:a260554f-5d1c-5ad4-b857-28cb5ba47bcb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ], "bom-ref": "urn:uuid:a484ab44-1b33-5ead-9370-80979dbb1b19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.2.1-tuxcare.2 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.2" } ] }