{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:797c059e-9bb9-559e-a864-d034f847ed0e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6", "version": "6.1.4-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:8ef3ed0a-f5e9-5c39-a49b-0be33b3e6f9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b5892147-2e5b-5753-952b-06bbc5f9476c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:45282cae-b6d0-59b8-9059-0b322e0bb4ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b8167552-f916-5c96-9007-74404f453efe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ee48cf10-0b60-5f88-b134-ea6e96299d9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:436f14d0-c867-5541-bfb5-d3fbd1a2bdab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6c5c6511-375d-50f9-9769-dc6d99bc7075", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:008d562b-9e0f-55ba-aecb-4972b1c7f09e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:8931e31a-1a18-594a-93cc-d16ffcbc2426", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0fe086ce-d7f9-5c06-8295-2d4f7e380d2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:420dcbf8-a8e6-5061-a5c3-385a71436261", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b58884dc-6594-551a-9412-1c888213987c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d3448d87-463e-515a-906c-bcd82ee16c5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:8901a962-bbe5-5c12-95c0-2ece9f886d7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:95e41f9a-84f7-5761-87ea-de71c0d81d1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:15becbe4-0489-5651-951f-3127e2b0e3f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c5a6e1e7-91ae-5827-85b2-71ca861c3b55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:958a04e4-9e13-547a-af15-92444539ae53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:eaa64175-c244-5645-8cf4-9d23d113280e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:043e3bec-9e34-591f-aaf9-07cb8c6ca66b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:90470085-580d-55d4-87c3-cb0077def3a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:078f5b02-a292-5dfb-a694-b7db96296fae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a592173c-6e91-5918-9f5e-a9c4018345e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0d18fa53-5d43-56e2-8be5-f2bfbf7516d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c90e8934-4802-53b9-8353-d02747c79657", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e60a1bc8-0316-5bbc-931a-7cc24f3ab7b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:bd17e682-162d-58f3-8abb-eea45209453a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b3085205-3451-593b-b358-a033988eab23", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:89843e80-440d-5089-9027-18273fce1186", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:681c86a3-700e-5f3e-a895-6c5b75950799", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:252bdb7d-5a69-5684-83a9-ce521c28630a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:de72c7b6-d753-5908-a20e-31457bb0caa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6c7ce7bb-8d23-5e1f-b7d5-dbb192014797", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d69c2edc-4ed3-5491-be26-db29d2614f44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:77426304-6445-532d-9013-5c1360000c1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:7a0653e8-1d23-58d4-b693-b1c7c57c87bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9e039af9-98dc-53c5-b89d-430f3c8f9b5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:da9caff4-ab3b-5c1a-a8cc-69feb662a0df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9d7d2afe-e2c0-5133-b8e4-64fa9fe08f7b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:290653dd-0757-5e8b-ac89-7baf072c7ccf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:199278cb-0f48-568c-94c1-7f811f397578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:bf46ac33-767b-57ef-868b-bc066b60c0cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:52a4617a-9df9-5daa-8879-a8ee6848b7f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:421f3506-2b38-5b9b-a3f4-b189ae919dcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d533ab15-ae45-55f2-bbee-41938f52deef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6dfd13a7-0967-5113-8f92-48032366f5c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-webmvc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.1.4-tuxcare.6" } ] }