{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:83da682c-f8be-557b-8d3c-d3423f83ff88", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-core", "purl": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1", "version": "6.2.5-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:03f794b4-a149-59cf-9d65-23f867ae151f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e35f3aa3-600c-5d04-9cca-a5c1cb92ed66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d1e2d5d8-4244-5c5e-a4cd-7ba74b2f3f64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:4fdf7a83-647e-5d21-bff9-636b60aa0774", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.2.5-tuxcare.1 of org.springframework:spring-core, and is fixed in 6.2.5-tuxcare.2." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ee7900c4-60d0-5481-a8be-3fd515a9dbcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:701d21c8-f0dd-5412-8d57-d4ab4ee70dd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:6370bc1f-deea-561c-b41a-34bbd3b08de0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:82bf110e-de66-5939-a52f-0eab6dc4f068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ed2b2dc6-eca9-59fb-946b-2b041846ff95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d288cb0f-e70f-5b9b-82ae-8a24575c1655", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:19591d43-b889-5b2f-b5e5-d6edd01c6cf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f82c4621-febc-5d64-859e-38d4dd928740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:449a37de-a75b-519c-967e-89c7165ad851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:860ece1b-3683-5d96-9e99-cc22ac06a5e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:bba69c75-7169-5058-a61d-431353ef1596", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:6568469d-366a-576b-95ea-a742a13d5c10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:70a98d31-7b77-5338-bcfa-b9cc0f35ac9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5e61e4ec-e5d3-5255-af21-d1781a2bb285", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:931ff65f-6635-5aa1-8c64-68ea7600845d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:46f721ac-7b3b-58c0-97da-37276d495b2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:0899bfb0-2e05-5fba-82ca-694416926fc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:697c3fee-b912-5732-abcf-4cd8f2bebefc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:4c5b7472-a48f-5e25-8c9b-8fe51ea48bb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e5887ea1-b808-59c0-95fe-54ec4d6da65d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c9b49a09-cb2a-5d4d-b6c5-15fd1975b46e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:cdfaf165-8b2b-56cf-97a9-e11c2b38d38a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:96835ab4-d438-522e-890b-a73d26535829", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2a214b9d-8d2c-532c-bf40-1ebbd43cbe26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:73422834-5020-5781-bb7e-a753b02aa362", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:60be7fc8-24a0-5974-a2ba-2063f7ad871f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:dbec2ea7-1dc9-577e-9b77-9289b469b448", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:21709c2f-4acc-5555-9891-02bd8e8a2807", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:41ee38c1-2001-5386-9707-b59810b02279", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:48873963-aa4d-5aa8-a5ee-686da7b87a16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d0a01c14-89db-5105-bbe0-6d64c7ea2516", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:717f54f1-6bf5-5007-8c1d-98d12b6a7ccc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:06a6927d-edf3-5892-8e87-310354fc9c9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:8f6a7e5f-702d-50a2-8f96-3479748e82ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7bb52b84-1b34-5ec2-a7a1-1cef946a8b04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:4f4e7b8c-685d-55ac-9b68-e3f1ec6f2361", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e2d48d4c-0e74-553e-8b41-39fec149c02f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e374c8ef-163a-52aa-8e4c-fd19da615488", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7ac83c1e-24fc-575c-8698-80795cce4850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-core." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-core@6.2.5-tuxcare.1" } ] }