{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3212254d-29e1-5a19-b9c1-be081dd7f240", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5", "version": "6.0.13-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:71fcadfc-6c4d-548a-94f6-d11c3395f04b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:bebef79f-7624-589e-8584-60d01c336593", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:69a19610-b864-5d34-9315-f7a6380531b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:733ea1c7-8163-572f-8273-e26c4ccf2584", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:af59140c-8351-5234-917b-6ee8347b579e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:6aa8ce75-c9c7-58b7-a37c-29c66e158ad3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:85bcf259-20a6-5b94-bf17-b8f454dd5849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:2b444600-f4c3-5d6c-8d34-65418d276b89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:646e203c-8fd4-5d6d-b137-0397c30c1b83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:4d3e836c-6a0c-519c-9965-5eff3a1f5be7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:4be4335c-b0a1-503f-b7b1-f875a3b03872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:3dfb89da-f64f-5b76-83d2-711548971348", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:d57aea04-b791-54d2-8876-832fa3b9dac7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:1e1f210e-632e-5ef3-bc6e-8b627e086234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:3a625bf2-b349-543b-8c4f-d61d2f21bb86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:3577b80f-3ac4-59de-ba77-a0e995a3b34e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:e181d687-1713-5fbf-be20-63a8005fa476", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:7e287cdf-eb94-5df9-b11e-d3b0116d3e85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:4c4b0a62-1427-5a63-9f9e-297b0c13598e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:2c554ca6-34b5-5e4e-bf6f-494442941000", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:fe2754ba-05e7-5f93-889f-ed9ad3c5441e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:ae39e500-c19c-5088-952e-c89b0327b71b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:e94b9ce0-2ea9-563d-9720-c8e35670a0b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:5b7a5250-5d00-5667-8215-848c49b4eb85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:ef5d79ce-ff84-5a24-8249-1b28a0b4d519", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:f8c60a76-b4be-5691-8911-a8522b533186", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:afbefbb2-cb01-58d4-b5e1-6a8c261fa876", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:7d1fdf8a-697f-50a0-8e50-b2f3eee6f079", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:68c7f784-d91d-565c-a9d3-fbc96f065ee4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:61e7fc23-5399-541b-a4dc-f99e135aba4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:6b2ae783-374e-5e0c-851b-d0d4bb275c1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:5c185be3-d894-53d1-a4f1-d9a67e82b5ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:df0bde11-c63f-5c44-9829-d2a629d34bf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:1caf9942-f65f-526a-924b-6a88d195bf70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:79db2aa1-7bd3-5984-a591-1cdc4dbe0348", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:ce9f80d5-3143-5ce1-9f9e-272a982264d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:888dc793-dce3-5b57-a779-448de7fb92b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:052c79e0-c946-52e2-beb8-268b68599257", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:c9343f07-82d5-5319-bbc9-89f27ecdee1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:2a32c1b8-4ff3-5adf-9a30-184adb6d27ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:009cf4e8-7428-541b-9277-5698ce160b15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:5c7b006e-5792-5a48-8f82-9a0d72becf20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:efee2dd7-272c-55d1-bc97-f9e2af22421d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:69c2f6dd-b668-55d5-b961-efdfc4c4b0c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:7c73e71b-580b-5353-87c8-ce0724528918", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:c09db311-58d7-5388-aafc-6a6a1cba51c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:47393f8e-8e62-5988-a3cd-cfb607db3b96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.0.13-tuxcare.5" } ] }