{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ba08174f-0f37-5ebe-93de-6d35bc3f7b8f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jcl", "purl": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4", "version": "6.0.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:f4191a6b-4daf-5e2e-b612-8e15130bc066", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:dc639284-6276-5bed-b069-3271cdddd14c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:edba1889-4f86-5286-af5a-da0beb1d4fbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8769b90d-3479-5240-ae23-04e5f854ae44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6d7b56d4-3a03-517a-80e5-6d2dae34aee9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1951f223-266e-5bb2-a474-cb1210bfffab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:02c2ebc5-2822-5f00-b55d-58475c044e2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:38789b29-5eff-5d46-8356-a82d89138de9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b009e906-2295-5734-8712-4c171b69aa2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:12c1238f-5f47-57b1-aab2-fdd266c86963", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:94568390-02a5-5a56-ac34-78cd2fc28648", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2ddefb36-4d10-5ca2-97b7-60d7f0628697", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e901c832-50ef-5673-9c51-2cd4a1bd3e9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:fe8f2875-9187-5dd1-b0bd-f26c4f294051", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:cc3de2fb-d463-5241-abee-31f8dc6e74e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0f6cad43-9bcf-5485-9830-7dd32a7c9e2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a196ca88-0aab-595f-95aa-462cf4d0b919", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7f966787-79c2-5c6b-bbb9-a70f150d56a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8420409a-182f-5730-abd8-f4f342784d63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:47065e05-0529-592a-a0fc-ee6ebd472e8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6600e6bf-de04-5d7b-9b88-ecc39aabf24c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:60fedd96-5526-50f1-bc0b-52e9fc2e6287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:55ce802d-164f-597c-8a8b-f87ee8c10da5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:87aec568-41dc-5e7e-9e86-85ab176ead47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e63e8157-63b5-5bec-a56c-e49f5dd388a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:72ff4e21-c4ea-5d9b-8a1a-8a08013f6cb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d423a284-4f13-50b8-b8f1-2d62c434c628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2a034150-f69c-5c47-8e4f-91bb63b63668", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:63d9cba2-394d-5336-9afd-a232d69fe434", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2d99afc0-3f3d-5584-88a8-ea3f1983184e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b57fb04c-ba68-53d3-a19a-fba12c571d8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:82baaa52-a19d-5fb2-a452-fd0b5b269aed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:91b33ecb-dfb3-5139-a9fd-c239fde39e82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5761a39b-8785-55cc-a6da-13332ac84c17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:bd1609fc-db3f-56d0-90cc-cc6596211848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:cd78d793-484d-556e-b059-99f3468d397f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d5dc4ba3-73a6-5ca4-8d74-c4a0c4799573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:99ec4216-632f-5fee-a976-d563f080c23d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:26a89853-43bd-5122-95f9-cde47d1c4ee4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:35e03a71-436a-5913-8d49-dbdc5bfec33c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:69767358-095e-5b1e-aa0c-306cfd4815ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d6fc964d-23f5-569e-93c1-6402d12a23c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4be8b80d-f5e8-5df1-a5b9-ce9b492fb1ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:deab9100-31b5-529e-9230-2d5c3bfdc0e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:91d25a52-3706-5081-a169-e583ccf1c007", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7822debd-e596-57f5-93ce-87e15bb31ff1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:53cffc14-b7c0-51b6-a570-847e8ae190e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:18198870-deda-578d-8bf1-76f3cba6c811", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-jcl." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jcl@6.0.0-tuxcare.4" } ] }