{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ffe71664-c6a9-5713-9282-a9b4bb598dd9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ebf0b887-237b-5ffa-ba89-853aca1facae", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-instrument. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c8ec8adc-ef6b-5087-8ca0-4846ac7c5ead", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:09e95667-82ef-52d9-a71b-75b92617602f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fe2cea1a-fc6f-5a8c-b24e-53663a4bc7a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7719ea94-1a96-5eda-9b86-e099af08489a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:eb3abc94-08c0-588e-a251-a91f521bbd9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d2d38410-c089-5a1b-8a32-8e2fbb269715", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:152c43dc-bec0-584d-b12f-0bc53adf9702", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c3d1c154-bdf3-5e61-ac3e-ce940b45f320", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5a78ba31-bb43-54ec-913d-6847c1a0d69f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a1f6c615-e758-54ad-b419-77f04fe3b719", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:43cc77d6-7fd1-5060-bf71-b6179cf3f848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d770932c-9b79-5728-a84d-5c0d14584aa3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:33ac355a-4498-5c32-b039-cf9f7ecdee50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7a3600a7-3c3d-52b8-8ad1-ca13a5065760", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1ed5960c-5a54-59db-923b-20a26a1708a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:db536fad-a687-5d55-9cdc-1360d1955d6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:330a9ce0-6903-5591-875a-9713cd6692fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b6ecbfcb-93c4-5697-bb29-e729ae9edd8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5a47d4e9-ee09-5ac1-9c1e-3e7545def4f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:aa898c9a-cab6-52a1-b670-f6d829209060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a3c2ce95-3959-5e7e-b409-9a8f8d13c433", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:07f0a3ae-1441-557d-a2bc-86da5debe0a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:99ad4bc3-cf82-5dec-a9f3-a4851bcc1cd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:86b4bda6-fb51-5e34-b0c0-adef18460609", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:2b17d138-f527-506d-bd2b-cbb5835b45b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4b6b08fc-ea1c-5095-8146-c8a31238a224", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f06b5757-f30d-5a71-b3ce-19d5e9df141d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5a53ecd7-b6c7-510b-9e4c-9ebc1dbda7ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:101e9a51-fbc4-5e3e-9b53-0f0b4101a5bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6f49c63a-3f4f-5099-a5ae-c2039cc8ec77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d0b6d421-7b60-5e23-b83b-7ba270c5a99e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ca3ed67a-23b5-5cf2-aebd-1e83dbcb1ce2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a962ad06-c160-5091-9ed5-f02f933f0b2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6bd6c101-496b-5039-9278-d0b30c09fb72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c766b6a3-4a5e-5612-bbd9-1ddb3128c7eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:646d2262-2f8a-5dfd-b59e-182fbecff52e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8ae5d607-de40-519a-9f87-bb22724a9bd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:2294c216-6747-5eb7-b4fc-f89198ab3adb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:aced7137-6c25-5350-bb38-ff9598768ce9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.20-tuxcare.11" } ] }