{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ebdb9f0c-24d9-596e-b015-1910fdb0da4e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-core",
      "purl": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3",
      "version": "6.2.1-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:22722b92-0a42-5753-b9c9-a03b67ffcfdd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1eb35432-24af-5bd4-a26b-30d48e8596a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4fa51fce-a0e6-5c78-a97e-5f353610a5f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6fb9b4c0-b48e-58e3-9996-cc658a7c52bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:08770cd1-97f2-54a3-a524-cb6b1beafdae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c2592868-683b-5452-9ff4-bd551f7cbac0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:caac2f06-151c-55b9-bdce-8f715763f985",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:31a08607-c171-5222-ba21-8fe3d4f74704",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7fbd90f7-ca57-5add-8944-93ad4b1e9359",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:998a7237-b895-57dd-9cfd-19bf51be7c01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b84c38d9-c38e-5112-b226-edb589d6826e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5470f46e-07d5-5256-a584-a5129dead3d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:578523e9-5cdc-5cf3-861d-573e4b4e845b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3851b6ed-c67a-51fc-872c-7bb410703f98",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8571a417-c515-5ddf-b990-905907fe1a03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cee855da-1aeb-5e73-a540-e1741c680fc9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:451c1c66-74f3-57f4-a746-0cd3de276f11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:39007acd-0ff2-57dd-87a0-44da5cb955f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f9d5d279-2063-5797-a67d-af978e1e9f19",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:be647984-df32-5c19-8e1c-48d97b12704e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.5."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e04cdc78-fd1d-505a-a100-68471a9584c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0a8e7e98-a751-5934-9fc2-0fd37fbe32df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b622c49e-e63a-5449-860a-aa74f1df4898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:baeb8ce7-c7fe-5a49-9b19-b8c08095ef0d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ed8c0137-7b13-5280-8185-4cce6c3a6b2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-core."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bd892c2e-6da4-5927-9a35-0246f4af6e30",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f1a9b64f-fac3-568a-9cc2-5b86362a8465",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47883 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e427ee5e-8c20-543f-a807-310aaa3f7b9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a9919914-0eb3-5a76-b12a-4e94a4ff208b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:580d9cbc-2219-56f2-94e8-aee86947aa05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6c37b1ad-a709-5bf5-8159-71c400295b53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0af1082a-8cb2-5711-9bdf-e3cd4f91a072",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6858d485-f64c-5751-8e86-28e1d8556e31",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47889 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cd265b62-b0f3-554c-b4dd-66d3a0a89f82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:361982c8-492f-5df7-b3eb-15a5b94f566f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e0398948-2cbb-5f41-a363-79aad34f643b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:99472352-d384-51a1-902c-079e8cff2f3a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6bfc6595-b1b3-5d58-bf84-700e12667b8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d5618928-111f-5c0c-8824-2ba72aecd43b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d2375e56-1aca-5fb4-995d-fd43a1e4db59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b22e0563-e87b-5e12-8c6b-ab79d1e29d19",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7b7fa082-d97d-5559-a893-33116cb96b30",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d2b4762c-2f8b-52f3-a9b5-abd02f5a8800",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.2.1-tuxcare.3 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.4."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.3"
    }
  ]
}