{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:059cda33-2da7-5e31-ae91-15ee1757ed6f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11", "version": "6.0.23-tuxcare.11", "pedigree": { "ancestors": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@6.0.23", "type": "library", "group": "org.springframework", "version": "6.0.23" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:e3c65da4-e038-52a6-8310-d466453c65e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:8f0b14e0-23b0-56cf-a81a-866e851f985e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:7959d316-7a4f-593d-a4e1-04cec73a1507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:c4ac5e80-92ef-52ec-8949-09b2638c4b1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:1b6233ba-6c30-5279-91ee-75893ed0b785", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:ae2b3709-0c08-553e-bd61-69f591acc77b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:8a7ccd24-7979-577d-ad22-7bb67e711519", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:c02fc89a-60a7-5587-a4da-496ca728bb95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:694b65ec-382b-5932-a9f0-d9d1a165cb84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:0f709525-895e-5c08-bf0f-fa7c370828ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:2199498d-4d75-5d8d-995c-c1e52d34a326", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:f6a699cc-87b3-5103-9a7d-5a2f0742236b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:748fb24e-3156-54e0-b809-a526a273d853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:04c77017-9817-5157-875a-18b83844c432", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6e681522-2363-52cd-b763-27da55aa4274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:7531f6fc-b0ab-5244-b332-8df550b3ab7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:31577813-edc2-5ede-94a1-0cb5a1f36d6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:eff3387e-da8b-5c7e-a9e0-18609a5bb993", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:09635e50-dedc-5846-a129-98dc541bf4ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:b7e031fb-6415-55d8-b9a4-ae35d78b7efe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:36a83390-04d0-5194-941c-9c43c4c653e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:816afdf6-a6e2-57f4-b04a-73931c2591d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:88d5975c-561f-52a1-aa8f-3ab0ee1eaecf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:1d9486d3-f4cb-50ca-bcc8-192b33d74cd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:52306467-a2f3-5679-a501-5c1d0e617db0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:b1a589f6-94a3-5013-a587-f3133d3425f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:25914cb4-7be6-5246-aa1d-00a787575cea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:75ad740a-96e9-5a7e-b7c1-98b8bb999088", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:dc841bad-8495-501c-96b2-ec4894e761b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:31aaffbb-5e73-5f45-8592-c53688875b84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:0bafd264-6257-52a1-819c-4eb63fd85a8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:ffa7b24f-ab20-56eb-87ef-bf24c103568b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:35688800-47d5-5c29-9dc5-e9fb1cd04bd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:22f3d9e1-c624-53e8-bdb4-3b69ff19c779", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer. Spring Framework 6.0.23 is not affected by CVE-2026-47890. The vulnerability is specific to the Fragment rendering feature for Server-Sent Events, which was introduced in Spring Framework 6.2.0 (commit 622c1b9e8c, August 2024). This feature does not exist in version 6.0.23, therefore the vulnerable code pattern cannot be present.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:41d83ef3-d1c9-57fe-8405-bc7310271476", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:65fff762-d9d2-52d8-bc2f-920810c8ca02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:2c69d382-a8cd-501c-bdba-c3a1de1ae7ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:bf8fc57f-ca12-5ce4-aeff-ee6b3c18d017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:5b210be0-f498-59b3-8b40-1f1c573b4770", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:a03713ee-4369-5473-8675-1c5a281d5b7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:b783ca6b-910d-5962-b0b8-e94b34fcf314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:37e7d5c2-5331-5cd0-8797-a317fd564ed0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:9cf95380-7ae8-580b-b1ad-704951a9a810", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.23-tuxcare.11" } ] }