{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2310161d-71df-5e55-bd90-7da35e15c4c5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7", "version": "6.1.4-tuxcare.7", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:19be5e80-e191-5327-b21a-dc6906a44d51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:8b77db3a-9424-5fc2-a641-b069a94ef3dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:bfc52213-4b89-546a-acf3-18b9351f9ce5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c92c59dd-d35f-5e96-afed-efbfb8fc086e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:0e9834d7-b69f-5aba-a82b-0d8609778231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b16d68e5-7d8d-577f-a43c-379539c7392b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:2e94c310-4390-5293-bc01-9c3e5c6e5cc4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:bce40843-ac3f-5494-83b8-8728888dec9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:f2bfdf93-9778-529e-b02c-3ee4dd33201e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:57e0399a-36ca-5111-bc21-081b394187f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:5652bd7d-7c91-563d-99e8-b34cbb18d70b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:2075ae6b-c6fa-537d-a147-49ec99f076f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:170d9321-44b2-527c-9e3a-6ed58b2a594b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:2e561c06-4ffe-583f-956f-4441b164ab5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9f12175a-9ef3-534f-b617-6ce4b7c03a72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:22783c98-0893-528a-8d5e-d937f4b70e6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:eb58e3f7-6510-5d43-a3a0-d9dd86180233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:cc29f19e-1731-5455-ae3c-925a861cae29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1b69640c-335b-5499-9f0c-844f57cf47d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:3c8de8f6-f75b-5797-9e7e-1c2d7c9be4f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:96559a0f-9ecf-5afc-8f46-b5953976e870", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9d3cd82b-f055-5c5b-8a54-3e194072ebf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:46f36544-ac67-5bc2-97f2-4c6ca7b5a12b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c19213a1-aa7c-53b3-b6aa-71a0e6ee7fd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:af29ae75-2b46-5dc7-aaf8-bfe4dbf62bb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:1e6a8443-c453-5eec-b316-303539a5937b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:4430cd89-e510-559f-9fcf-bcc1cac70171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:ee147b83-faac-5c26-bd83-60aafa98830e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9c274e93-8779-5b42-911c-e2bca15c66d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c8595bd1-e8cd-5ee4-9619-0277db227611", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9a23f362-89f5-530a-91ce-f13a1f1a3fe7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:ae0f0c8b-b073-55f0-aaaf-a75c4bf8d0a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:db33079b-727f-5bf3-9445-b7456f222ebb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9c5e78b1-6d97-57ea-a979-4c68bfc141e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c1b3a1ad-5ab7-509e-aa65-6d520259d67f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b93cee94-59dd-5a1a-9890-4822f51093e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:4cee38f8-d951-5316-bc26-562c908880e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:89c2e7b0-bb93-5e1d-84f6-c42b1a5adfc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:c2129f96-9204-5805-bde6-e3d7655f213c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:ddba1d1e-26b1-54e8-8ead-d290f9b1c2e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:09e466c5-9459-57c8-8654-4d561245fce4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b62e4797-886a-5fd5-8181-756f07bb17f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:11aea03e-0fac-542e-9bda-ff27bdc2dd42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:88cac176-2bca-51eb-bc2e-9d0cbf8c1d12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:9b7f283d-dad8-5779-aac0-9db1babda8ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ], "bom-ref": "urn:uuid:b0e64f26-8bd5-5d03-8572-d601f6f829b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.4-tuxcare.7" } ] }