{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:57ceae17-3397-507b-bb8c-8b8d105e9b5b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2", "version": "6.2.5-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:b367d2fb-2d1a-5ab1-9e3a-d94b9c9a4166", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:3f16da6a-39e1-51b3-8758-8be0075236d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:0193c4bf-02c8-5313-b2e3-c1fb2167dca5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f3b6f889-46b1-5e5a-b90d-50cb5ec6190a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:978bcf13-dab5-57e7-93a1-a6876a00d516", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:8ae339dd-75bc-522b-b23c-c9452500dbdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:9f1b5e9c-ffd6-5d42-860c-f2f75bf31c9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:652fd3e6-2b90-5366-b8e2-db107b8bdad2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:aad528bb-8d67-5fb7-a99e-99e68745c3f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e308a5ad-2b89-554e-9f6e-5042f41de46e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:634a29b5-e449-555c-80c4-5563fae0b762", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:48e668ad-5ece-5610-97ca-0970b29b9ac5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:37bc1811-d682-5d2f-921f-04f79e522e71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:34d68c4a-835d-5ead-bb4b-23a24fa1d044", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:877a8f8a-e0ff-5845-acba-b3709d74e81b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:96cbd209-1358-5774-ad56-f6572ad4fc15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d2d3c1ff-1222-5b7b-8535-8eb80c6cd63b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:28c91184-ab8c-5555-b611-c68c24874f24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:b68241dc-e420-5dc2-9cb5-5fcde870009e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f97655d1-c672-53c3-ac70-562147c334d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:0d5b0d82-0543-5811-b9f2-aff4c43a0ae4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:302a2992-4b99-5a48-86d8-2f9fec2b4974", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2bf8a6b9-7d68-5cb6-a948-f098503e7865", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:407fae94-f294-5f9c-9173-69c22be0e17d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:5107e5c5-90a0-525e-9f11-535e64264438", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:5f84ba00-08bf-52f1-9da6-8db90d69fcf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:62bb5463-92e8-5fc8-aa5e-49491c179154", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d50c1762-360a-510e-8001-d45a2446310a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:dc00862c-7eb3-584c-947b-f7d5426db8e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:71ec31f1-e3a9-56df-afae-955516a59221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2242bb5e-a7f8-5972-a010-29d258fc252e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:35c1f009-0f82-534c-87bc-56d3832aca46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:da6c3b5e-2902-513a-aaa2-3f2ff1a0528b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:6e745ea6-a151-569f-b84a-165bd5fa7900", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:72d59c93-b84f-5d0c-8d2c-c29012a9b1de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:555b5816-b3d7-57d0-925f-cc26bb6bc704", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e725ab43-c14a-55e4-bc8f-0d765d55950f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:24a402be-da45-5f78-907c-70cd63dd05cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e9d1901f-9dce-5211-8d14-92cd37ce1167", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:c6d07d2b-bbdd-51bc-a47a-6d4afca95cbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:210814b1-1c2a-5a76-aeea-b053ed3dc71e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1f7d5f9f-c262-57ea-8717-cfff510c4b92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2b4bbd62-ad57-5592-af66-b6734ebdeeef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.2" } ] }