{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1285d0ab-67dc-5023-9aec-d096825803d6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-webmvc",
      "purl": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9",
      "version": "6.0.16-tuxcare.9",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:61dd8961-18c4-55b2-bc34-e476113fe2e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:19b45110-f805-5429-8360-346462e61493",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ee6eede9-3d76-5e61-96f6-f8dcdce36c54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c022379e-35d0-5d87-a71d-2d51759ae61f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4c805509-60c2-515e-a1b8-cc65d5665b87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3fef82a5-9cf9-5a11-a307-56a7b6518b03",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0edb4585-baa1-50c2-95d1-8900f126dc08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1e6a045e-23b8-5247-af79-56873ee29f64",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:77aae065-2427-5ae4-99d1-2cce27c19874",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:2a4abda2-bcff-5a22-bd53-5baad8129668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3cec0930-8a72-509b-987f-e38fef1770ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1c852560-2e41-5cde-bbc4-82a7eff71cef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f3592756-0c5f-5102-931f-54bc2e9ef9b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:41e03f9d-f77d-517b-b4cd-0df2c25a2392",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f02bd4c2-00b7-5fe3-8416-e135c4db3351",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d303cbf4-0fb7-5989-aead-710b9a32b360",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0d0f02b1-dbc0-5eb9-b6df-63ac76a51e94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:14955b98-629d-56a7-864d-f4cd943fcc6d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b934fd42-7468-5d85-8f99-f8a600b08bcf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:84055f6e-a01e-52f2-8997-c6bfd106e7ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b3f340a7-78d7-50ed-9f12-409f2a837ddd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8d63c5b1-6401-5bec-85f5-b54cb7017deb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:6050b5f0-6abf-53ad-bbd5-42e0bcdd16a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b52ebac2-e371-5571-b6f5-edd045fe890e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:09186e8d-72f8-59ba-997a-ad1e3a44d351",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0b30a3b6-4ea3-506a-b41a-09a73622ddad",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:99b06a27-a5f5-5880-984f-0f357b26929c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:46812a88-5db9-589b-9084-0c92585b6632",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4049f999-8ef7-5aa0-a346-eb40103d1b22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:2a331bd8-3ac5-5201-9879-db0820146fa7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:b6e6d86f-7e59-5ea1-8a83-10a2a7e392a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:0ee5948c-2730-579e-a72b-0f8123a3b0c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e9c587d2-b00e-5a68-94fc-5d12b1feff4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ba7d0fd9-f8dd-5957-87da-175f40f99a40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:43eaf133-a2a0-5a77-a2d0-6d549546aa0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:2b39dcc3-3263-5699-af74-d1ddaab4e445",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:803bff59-5525-5736-a129-b4ddb853c75f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d45f4a56-beea-58b6-baac-51c17a4e16b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:4e6264ea-1a12-5cc5-8573-ed1d6f3b6a8b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:6cca01d6-bfc0-5865-9264-3f9323ec446b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8e74b909-687d-5fe7-acac-9751914e4d59",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:84171318-98bf-5913-9d9e-edbe5b5d24b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:cad2e185-bb22-5cb7-947e-03d114061091",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1cbe12af-5a64-5a19-a55e-9419a019e90d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:bd5ef864-8d46-5b74-b27f-a5507e820250",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8a48dc47-f693-5dee-82b5-684cd08a7ef0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-webmvc."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webmvc@6.0.16-tuxcare.9"
    }
  ]
}