{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:84ade7c4-c68f-5f58-9695-790ba546d76c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4", "version": "6.2.1-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:8daa7a37-a7c6-5b5a-b077-a63bd889f884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:8dfbd1ec-a9d2-5880-9880-006e7c512d3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0eee2b27-2203-5cda-aff6-e498453a2d95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:2038e912-130a-57cf-8ea9-7bcf5956aaf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:4f8d3730-12ba-52c2-adca-a165b0e2d5c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:dde7310e-c23c-5edf-bd6c-565f837c06ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:660c8b22-844a-5912-bafd-d3df6583bb87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ec0418d4-1a88-5a31-b2cd-2a345f4e4ebf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:31629f36-603b-5fce-9ed8-ced20cbb03da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0306d86a-5aff-5111-b4d4-5d83182d16fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0c918e6b-9369-5171-9a13-09f6d2901145", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:8ded2eb5-bdb3-5848-94ae-a4044f5a9ec5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ad420195-2cd9-5cae-be6d-d8a97002a8b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ff3b8ca3-b6e3-5cde-958c-4d3d1ebc72e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:fb8c6ec1-9167-59d1-a8f1-0909fc542968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:15b2e1e1-51ac-5765-a7f1-f7f7b8b65854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:69fbf605-7867-56e9-b3cc-e5ef6412279a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:641f3cbe-e5d1-5e43-a352-436d2189a4ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ed56ea83-6e97-5c77-b60f-cd4dccf520f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:093f3b59-2162-5e4c-a8cd-220629b6c202", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.4 of org.springframework:spring-core, and is fixed in 6.2.1-tuxcare.5." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:aac78f87-7cd4-5310-89b0-4b1e9e2a012f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ea061f67-daee-5c83-92bf-05a4d387f66a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:494a6c95-4fad-5c0e-bb7e-9ba2c709cce3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:62021f20-5959-5bf8-9648-9d5c6af9d2bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:b44acf9d-4e5b-534c-9d60-3de504a85495", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:d4b8f196-9340-5031-a248-0b6659b0a49e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:44e9ec50-cc3a-53a1-8ae9-1acd6d8a8965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:808f6beb-d29a-573a-9c9e-3bed592744b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:12bebf01-dece-5884-8a69-3f4ce78b0f48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:92aa86b9-7f89-5492-a05e-70ee19a48412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:b1921f4c-884e-56cd-9ed8-f2618c892063", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:65a86e97-a992-59be-8804-556b425be7eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:119e0943-c69c-539a-8fd5-4abdb9e05963", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:eafcdef4-bd41-5eb9-80bf-8e27c7421d23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:57c0a8c5-6d51-5a18-995c-da7f90efe4e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ab9a102f-e176-594e-ade3-e0dba2c24665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:a75d11da-778d-5531-b1e8-184243939c2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:0a4f6e8c-9307-53c5-8997-92bdf9d0a86d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:51876c0f-aae6-5d47-89cf-2e5b43e2561a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:169135d2-62d7-56fe-a9ea-bb623e4ed3d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:03b41c3a-9f77-52ec-878b-5a6a1f49a1a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:ea3faee1-1861-5046-9135-5e7d2b75939b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ], "bom-ref": "urn:uuid:93dd3aaf-ae5b-5f93-ae6b-2584fd7aacd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.1-tuxcare.4" } ] }