{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:aabf426b-efe2-5cea-a9fe-7465243d0c64", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6", "version": "6.1.15-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-context", "purl": "pkg:maven/org.springframework/spring-context@6.1.15", "type": "library", "group": "org.springframework", "version": "6.1.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:cb410e23-d692-58e5-8310-7ccc62c5b4f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:59a6bd78-4455-5bf5-bcfa-4960e9399c1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:48768cfc-e972-527b-a252-841f5f32dc2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:bb84248d-521f-5dc5-a4d8-f5bcfd24bb67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9315bd00-dee5-53aa-bf9f-b0b9055eec1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:db404f1a-0ead-5109-ae0b-c921b5bb3580", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:fb5fc6c0-dff6-5b45-a9f8-066880621638", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:6711b3b2-03a2-56b0-885e-21eff440221f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a5cb056a-3da1-5ce4-85e3-dd330d9edb2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:73510d58-8efd-5386-ae01-3b43be1b24f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:2ccf6fb0-548b-5f54-9045-a8fb92b9a9d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:120dd59d-533a-5f14-9bce-46b86c32b53a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:c484befe-cb82-5d1f-a40a-b551b56e875a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:f724103c-26d5-50c8-b912-1056fb0c8eb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:6e29f1bf-4023-5bd5-b819-e0db1f2760d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:742c5f26-e81d-5d3e-89b3-2e5140a07a27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:da00aa96-22fa-5091-a85b-ea3ac8e30e3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:377d7f70-25cb-51c6-a1bf-1cbcfe080a51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:74a911cd-b1b5-5f87-93ba-1f87a115fe59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9cced81c-27a5-540e-b3a2-869f50cd4686", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:1e4da67d-c061-5985-8ff0-ccb32c181564", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ace19c39-1e58-5ae3-b2c6-2a22fbe78d9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a67b2bd5-4c90-5999-95de-86bd0061c283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:6d6284ed-4d58-5d47-a89d-b0812dd8bc3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:642a7740-505e-5e12-9329-239225ea3bd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:c91e8c1e-320e-5716-b592-a91922fa3bcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:6f377ee0-8319-5b09-859e-ffeae839a22a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:e8c27d5d-2354-5c8b-ad14-2bed3dffa2f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:43537a8b-16e7-5490-8bdf-9de73f563f77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ce5f612f-cd3e-51a6-bd34-1472ebda0c6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:dab1b605-25b0-526a-a7e2-51c3d6a47c4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:8730813c-031d-5768-9385-4887250c6df5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.1.15-tuxcare.6 of org.springframework:spring-context. Spring Framework 6.1.15 is not affected by CVE-2026-47890 (SSE view fragment stream corruption). The vulnerability exists only in versions 6.2.0+ where the Fragment rendering feature was introduced. Version 6.1.15 lacks the entire Fragment/FragmentsRendering API and associated SSE view rendering code, making it impossible for the vulnerable code path to exist. Git history confirms Fragment support was added between v6.1.15 and v6.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:4a2c8c18-a841-5f9d-85f7-4419802945c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:e19f7ba5-8562-5dc4-84ab-b2873b73a4e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:3b9ef798-032e-54c9-b3c8-b3cbf3cdc065", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:5ee71c6a-24e0-572a-ae8a-5e3d7d05bb59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:720ba167-ff43-5f91-a75d-3c5d11307a06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:e35638d8-4958-5105-a92e-1ed0d78a98f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:016f6a4e-f0d9-5bef-98e9-16ad8a49be2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:f2c1ecbf-0797-5d9c-974b-0d94984ae053", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:15bc8c93-24fb-588f-97a1-4fd45b345a80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-context." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context@6.1.15-tuxcare.6" } ] }