{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:551ae1fc-986e-59a3-8882-0495bc8ce7ff", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6", "version": "6.1.15-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-context-support", "purl": "pkg:maven/org.springframework/spring-context-support@6.1.15", "type": "library", "group": "org.springframework", "version": "6.1.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:f9103b3c-b068-5c53-a9c6-0c5314bf39c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:282a2ce2-fb24-5f48-bf01-239ca9533087", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:c5fe9368-b95b-500f-88a7-3d22ec2470b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:55f392c3-808a-54ef-890b-ef7bf3444e3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:12408efc-4ccc-59de-9a61-a2d20c34ca12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9e2e1b07-3cd7-5f82-87fd-9f641815fbb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:71da5978-8389-508c-9095-ed77d0348dce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9af23c21-cfa5-50bf-8d4e-00c8108a082d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:12c33ceb-93a2-5c11-a7d4-e6322a817651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:1b924d05-b38c-57d5-bfa8-41c424fe33da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a818b5ed-3979-5514-9247-584f424a5fb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:34d19704-2b96-5c1a-815f-15400aede6ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:141ac43b-9b98-5030-b41c-922bd7dbd063", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a94d92d3-06e0-5cf0-9696-71dbd3bc9749", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:3f61e4a1-9494-5cc9-9936-1f5617fef734", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9a30e6f7-b036-5544-b4fd-1e131eb8b240", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:583d18c7-5d8f-5483-955e-19e4facc7ed7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:5a0fe3bb-2c5e-57c2-9857-f0a7b720841c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:71049e3b-6d66-54ab-926f-7e655f272bf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:bea4a4fc-bccc-5777-b740-93db3f782958", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:85411cc8-0024-5b74-b337-60f1018a8813", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:3942a1ae-e14a-5e85-99fe-ed9b527bccdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:36729988-a82c-5f6d-a22c-d21fe36331dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:dd8eb54e-3daa-5667-9f6b-75eda0c93cbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:dc0b14ee-8d52-501a-93e4-80dae9eaff43", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:66a72b69-0bfa-5359-a779-b0587106da82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:53dc4bae-1027-526e-83e0-50d1b27700d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9277bb9c-9e2b-51d3-95f4-960520a7f9c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a82b7291-0cd1-57fa-ba14-bb3f47320912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ceb9596b-2661-5d34-a017-11e2daebf9de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:1b76ec20-2e78-5472-a64e-a5d3b105af99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:033bee8a-d337-578d-a8a2-1f5bc1228b59", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.1.15-tuxcare.6 of org.springframework:spring-context-support. Spring Framework 6.1.15 is not affected by CVE-2026-47890 (SSE view fragment stream corruption). The vulnerability exists only in versions 6.2.0+ where the Fragment rendering feature was introduced. Version 6.1.15 lacks the entire Fragment/FragmentsRendering API and associated SSE view rendering code, making it impossible for the vulnerable code path to exist. Git history confirms Fragment support was added between v6.1.15 and v6.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:018b14f3-8591-54bc-8bca-e22fd8cabb50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ccdbf496-7b98-5c09-84c3-361d44a0ce56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:82cdc8ca-8802-55b7-93c4-af56e9c5d8ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:88d0600e-839b-5ab9-833f-b0e11286ef4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9a590079-c0e7-5468-b127-6f86d02c0d0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:f4c7cf6d-6074-5f95-a701-8a3a42b4cb88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:7e320867-2b72-5b42-9bd5-62fa6afe52a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:8adc66ff-112d-51c6-83c2-255869414a0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:30d99e7c-1a19-5b2f-941e-86742cc4eee6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context-support." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-support@6.1.15-tuxcare.6" } ] }