{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d10bfa92-710b-562b-9199-3918fa7a244b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4", "version": "6.0.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:dd29beb9-daed-5841-bb89-15409c398c89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9bba7355-dfab-5a79-8921-5eaf79fb8abd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c59170bc-f97e-5102-bb3d-d67290ec39fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:df367d93-7d88-5e41-a997-103f42fda19f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a559531c-af3b-54a8-8ca3-6ac372f62cc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1fcfe491-e208-5a4a-9759-957a5a3133ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:989c0415-3012-5698-90f7-be214947eb8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:278e43a0-0c04-53ed-bd42-2aacb2ca3f7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7c499888-0d46-54ed-bcd1-f39c9f68fde0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e30913ad-e4b2-5c06-80e4-ab8561a89839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:941dac79-5236-561f-afc5-d8cf9f914e27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d6f06bed-a171-5568-b652-2a3608544cb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ccef2902-832b-5c0b-831a-fbbe064ff1b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8c6fa186-24e5-5204-bda2-419e750985b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5d4e8661-98b4-50d1-a2a9-62e8bf160445", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c9f94f01-f79c-522f-bf33-0cda25a5bf22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:087c1936-d3f6-5b0d-a7ba-0ccb7584e8e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:3b754697-36ae-57ee-82cd-49262aec6969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:f7787120-fe47-56a3-b815-8000e9d99d3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c80ebeac-adfb-5319-91ee-83bbe8216919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:af486922-620d-5957-b9c2-30cb528d8795", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6320c09f-7ef6-5fd5-9854-0d2fff02f028", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:36143eda-6405-5414-9dcc-99f7ef5b3dd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:770c4dcf-d327-51e9-a8a0-70128dbc7f6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:73605d7b-9e97-54b3-98bc-c10cc4954e50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:173414c0-47f3-5b92-9712-f4b9553377f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0d95e016-272c-5a16-86a7-096690fda221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:563e0ed1-0d84-54ec-9cf6-4b375b9cd785", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:dbe323c3-8f78-5847-8262-3780e0b5b93c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:445c1b75-d03d-56d1-98f4-0fd28a2eba63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:05ba9bfc-7670-50d4-99af-134787dde26f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:01233dc1-646a-5d25-8a97-a23c2d5c5985", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:db438f0b-86f7-537a-a641-af35fc5c75b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7b457276-57f2-5ef8-8b2a-874eab6e9fdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:263df667-20e6-582f-b8e5-a1703a9b13e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7a59f04b-ed43-5d85-8c47-bb9a51dc341e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:64f69ddf-756f-5e88-b5e4-91095d924322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a7b0a539-2797-5675-81c3-22576792f271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b9e0c271-9c9e-59bd-9290-15fcec7924b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:269641a3-adb3-5291-a8e7-1b6ecb8c8aaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0a53cb4f-2cbf-56e4-8a27-8cbd00fd7d5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d4f36372-1103-5861-b403-f23826d876de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9acd391f-365a-5e89-99b7-65e63c2425e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:87369d5a-3fcb-5d9f-989c-b09f6c59069a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0d68ece2-97d0-56dc-b1cc-827d28eb63cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5125be75-1450-5c3b-a55c-598a167b54d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:bf0aec2a-d056-58b3-87bd-5f780658b982", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4bc61d24-1491-5273-b6b2-7a5cbc5988c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.0-tuxcare.4" } ] }