{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0f8b5021-4a26-5a3f-a206-12e501655b1e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7", "version": "6.1.7-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:69979516-aa5e-5572-9a30-3afb4e571de1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:7091a976-ccc6-56b3-b896-29b1ae3444d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:551a3440-d4e2-5764-8dbc-57d3d18f7d95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:3d65bce5-d79b-5c79-9c73-360b56805039", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6161fc75-0632-5a60-8d81-f3e726464302", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6f0f90ff-9a1a-58fb-bd20-9f23df8c9047", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:f3d93041-d3cb-531f-bb76-358bfa00ff04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:67a05599-d16e-5d1d-9c79-355aa461d264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:5c4979d4-06cf-5f6a-a758-dfdca9bd2d28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:ab4935f7-7be8-5947-bab9-c06dac0625a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:ffb225ce-a06e-56ff-8643-815b6174cea5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6287b3ea-97e1-5042-be7e-235643ffc37b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:c0d4f3e5-8224-5358-a259-9974e8257fce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:96f7ceba-7ccc-5638-ab18-6575c76cf7d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6bf113a0-961c-5f42-a6af-25e19e524d58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:54dda43c-ea35-5324-a14a-e00b68a9d0e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6e207637-a547-5fca-bae0-2b4d9aa28eee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:74a76280-e7cc-5ca1-91f6-24ed72ac8318", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:61d3bc71-847b-524d-a360-a94bf50fcbea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:edbbfad6-8836-5b98-97d2-451817170cea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:dd19808c-7068-598e-a90d-85c2c702b94c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:292bbdc1-e2e4-560d-a4b6-725932106192", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:c56da4af-063f-55ee-80a2-9d146dd91efb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:c09cb5c9-be47-5737-b235-80f32aa3636d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:fa868b43-0589-5a23-9b27-38e717eefd05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:fc12b26d-91af-5f6b-8db1-9fd78080265f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:2cf56394-510e-5265-aaaa-4f723d632ce2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:709d5779-beef-5b66-91ec-182082f105cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6988463d-880f-5ca3-b0f0-3f3e5524f990", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:28a0ef74-ac3a-5a3e-978a-28d59f5f9f83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:6ddb2b91-0e8a-5356-80c6-d06c6f4701ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:35413873-223e-54f4-adda-186c572bc007", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:33d84bcc-3803-5188-863e-75b88968a272", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:58589ae7-7feb-5aaf-9b17-b6996aef758e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:d2ab7f39-b8ab-59df-8fa8-2f592334a68f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:f82da3b5-01fe-5185-b6b1-7f251ee827ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:d20d390f-a382-59d9-8811-eb512c60ece4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:32a493b7-394b-5ae9-825a-5eb94e0375b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:433c0302-6283-506b-9a66-190d958849dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:e17f7c9c-f948-585b-9a1b-055fe8a34448", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:c0755c32-d0b4-59a6-925d-92b51af55eb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:8e1cc371-9acc-51d4-b449-e75102339108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:2326288e-8b79-545b-a2a9-4985f96a6944", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ], "bom-ref": "urn:uuid:d744af5c-0811-5b65-ae12-0ee2ca8bbd5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.7" } ] }