{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0f7701fc-8a4a-5b84-86b1-a1d7ded80499", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6", "version": "6.2.1-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.2.1", "type": "library", "group": "org.springframework", "version": "6.2.1" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4cb09b86-8346-572b-9c3d-61b5301f3b7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3c4bf8c3-115b-5084-9300-8240ca9e1286", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:2b48e3ca-9714-5f7f-84f2-2539c4b880b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7e3d4b54-2da0-53b8-90c4-0722a23756b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:95157edb-b4e8-5855-9128-116a458580d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:53becb98-5654-5cf5-a205-71a65285982a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b16444d7-145a-5669-b860-3712408af70f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:5b8e470c-4dde-5c94-9752-c3deb853b8fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d8e62444-a8a8-5506-b9e2-aaaa19a9d576", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:df400628-1807-5613-ae52-07ffdd01395e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:cc8f0a29-d2f4-5e78-a186-dc63b9e950c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3ddc16aa-413d-50d3-84c7-86bd842bd33b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:736b48dc-c7df-5122-a0c1-fb15a19a4cdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e463984b-62c2-5f2d-8831-6156fb071cb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ce11f973-5745-5c9c-b580-841a49372571", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1d88546d-510a-5151-8582-53e7428d9e22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1a857bd4-15f1-5d57-875f-617b7b384861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f20ce8b8-750a-5e80-bdf0-df2436fb8276", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:877e02cf-af47-5f00-9ced-0c3e58928da1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d750c7bb-3495-51fe-8bd4-79e2c930bc2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:96af5d29-b58d-5092-afe1-7b2065ecb393", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:bd76e433-880a-5148-843b-ba34546291f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4ba5f731-d15b-5721-9177-a0f869c266c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:14e92391-e291-5621-9226-c8a531bb36df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3b8108bc-ac26-57ba-91ed-097b074c809d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f3701b3a-aab6-5f0c-a700-d78fc47f2612", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:0d8fee64-94f6-554a-b250-249222e1589f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b8ac7f5e-4044-5473-8631-97ddffd0ef09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:437acac1-f38a-5072-b999-59ea2ea686b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:a858e6b6-1b3d-5c4f-82b7-0f5b3947def0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4e55bc1c-ec3d-554d-8ba6-15735829a464", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f65d39bc-de04-50f6-96d3-05781d520930", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f1e5efa4-5900-5957-8ea9-3bc62ed28a8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:dfd74a51-2b3d-541f-8245-fc81eb92d39d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:16f8e32a-bd4a-51df-8603-1d44834312e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b11a014b-0648-5241-93d1-da383e661261", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6af9c3b7-e4a6-5b89-bd6f-9e49d90b3e3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9ce45c86-1bba-523b-82e4-62617fcdd62d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b0361a7b-8185-5251-a5a7-5c2b9cf9de79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:94605c88-9d90-569d-ac3b-ce8fac0d10ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:895fc102-bfd3-5ad3-b630-907546ab3573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:55917c59-656f-5699-b43d-9f10e200706d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c964ead5-1686-52e8-9204-26b4d1df8fa8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.1-tuxcare.6" } ] }