{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2cd9d81c-76fb-5242-bcc8-ad1f355a4eab",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7",
      "version": "6.1.7-tuxcare.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1a7e0d31-23b2-5899-9106-e7fa7f393c81",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3f6ea1f0-1a8f-5f38-8d7e-fca5a7562e07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:76db2176-fc2c-5a38-a4c1-a0318898925a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:700f39c6-2a8d-5e46-bd80-d1be4a3ece20",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d8c229fc-7587-5a2d-a0e7-f2ac4695043e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:87a44e30-bc37-543b-a281-48b8280528c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bfef1b6c-15bb-5509-9629-43d247027674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a329a76f-e375-5d60-a365-62c8672ce66a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:991f5f93-0dda-5a15-9ca4-04c604e793f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fcfa52c0-6f5f-5d17-a726-a2e6d43e6487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1347fe11-d5a0-5a1d-9c75-e0dcc832692e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:24cec795-1ac9-544c-9864-d2f019668aef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:045a787e-9d6f-5139-8681-2d3758e71a97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:48854d8a-0d14-571a-af37-8051b33a6e68",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2898efe0-e190-5c19-b29f-fd45b4554cfc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2644c2c1-08d4-5deb-9caf-fbd19bbe4cc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:27b091d8-84c9-55b0-bf19-5eda72ef13b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4a7d6311-e3fd-5133-90e9-4e810e9b9074",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e43d9200-203d-5e6f-8a82-756ecc91e5e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a117bc57-0a3c-52e4-850f-c63d30b92571",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0012da08-655d-5173-b1b8-27f510a718c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0c21c4ab-9d3a-5da4-9de3-419b974ad78e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:11b0fa27-2ccb-568f-a65e-4b55739d3254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5692d49c-cd27-584b-8ea6-42d80fccc906",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:885d5840-7470-5d67-bc68-51f32e4853b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3886a74b-158e-53e0-850e-56b9dc130b06",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ad3555a9-440d-575e-b64f-ee8db25142d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b052770b-057e-57ef-837d-ac4c05805079",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:da20a7e6-fd0e-5b49-b07b-87caf261e2cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:83561ca0-8765-54f4-b22b-f2f55dd10bef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:643155e1-c5ff-558e-aed2-295e5aea6447",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:95d3393d-0be7-5457-8fbe-c03f62964cd2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:25f56fbf-05a9-5050-aac9-713a22752288",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:999821c3-d7b0-5a7b-bd44-2ea14e2042bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6d7175a4-e4a1-58ca-ba79-92794fe2fe9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d6ea9fb5-75bc-5134-842b-e8ef715f405c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b4c14be1-ab5e-59b8-9f55-5d7e2858422e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a3f04109-ada5-5451-8c32-443f14fe2955",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6ca4feca-07cd-530a-96b4-4d001ec76f5f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:077345e0-9648-58ae-ab3f-44a9c2ef8a0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6d6ffbaa-079f-5ef3-8ae2-47cfdd048b99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1c8fb218-5a10-5679-b54c-ab91e76b2f79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0cf082f6-1eff-5ace-819c-05383c47a25b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:659a7916-c10c-5fe1-b77e-fd3b2cb059c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.7"
    }
  ]
}