{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:07b091d3-51b2-50a8-a59c-44ebca9f2c42", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6", "version": "6.2.1-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.1", "type": "library", "group": "org.springframework", "version": "6.2.1" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:995c2aec-6c6a-58e9-a48a-e42071dc6d3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:09ff5b94-8798-564f-8104-95478a7798c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:30d20d86-afa2-58a7-a6ad-ff5b96dea6f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:068f4da7-8462-5ad0-9f07-a6ebe6083cde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:57c0afa9-35cd-58c6-bd10-27826e255062", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:a1f919b2-2f6f-5c35-8c92-82794a61f76c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7e9ff81c-13c1-5724-b4fb-0b3777a366d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6296589f-0e25-5079-8da8-9aef031064f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:18558b92-4b31-5d33-807a-24291a763420", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f9a4e0b0-b6cf-5f04-b4d4-e537e34e9ed1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e361e9dc-25e1-56b0-8c36-d81d775fe754", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:bb68edf9-e17c-528e-846e-8a446ae16f98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:a5cf7250-dc76-5c6f-b738-4d29942ca4a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:57419353-9cb2-57d3-8186-2f37dc8ca460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8a8f7c79-9ed7-5aee-8870-a9b2f658e5f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:fd847170-bcf0-5995-aba3-39d5013bfda6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e788f93f-669a-5ce2-9727-6cc1754cb208", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c3eac6d0-d36e-5687-af65-dd5034fa8b5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:16b2ffc9-60ee-567b-9b0a-68cfd7954aef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:59b162ec-f4de-50e7-8ab5-89dd1f689ce3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c8c64461-ccbb-54b5-b036-8ea4b2382489", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:49056498-5323-54e4-b5ee-807c88299914", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:0e79314e-1e4c-560c-9ca2-4b7d58441ff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3b9013bc-c1fc-5f46-8932-c200e255cba5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:421b0f37-230f-5049-a986-128ed0e3ee91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8e3e1a4d-2bac-5003-8fd6-52eb66d9b245", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:17aec303-67ed-57fb-9322-05b8f95fc39e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:be4f3c0f-9f10-53c1-8de5-d1e8abf8e710", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6de923d3-7a6e-568d-a9e8-ddb0205df3bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:a48a0bdd-6eaf-597f-9699-a443f80ad336", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3f2e8d63-3227-5e06-b584-7122b58f06ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:edc30bc9-ef4f-5d7f-8730-6f8f64f51112", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4f91c66c-8955-5e9e-8fba-da3d48d88310", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:918e267c-aef7-5a68-849c-7368ae4578a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3410a364-2ce4-5698-830c-30582832e819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:cc8ef767-dcbc-5a8b-b47a-11a3887e8d06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:720e7ab7-c01a-51f1-bdd8-191c99213ca4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:04ea6e1b-8c75-5f5b-99bf-d4685e766757", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4caf6e82-ffb7-5c39-804f-aaf500247cd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8ce1b570-84c8-500f-8faa-d6d04e5ba400", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c05996fd-a233-5fd4-af4b-a44576c16aeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:95834b0f-3397-524e-b3f4-91db082c1486", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c5a3cb2a-c30e-5e53-bbb3-4f20dbb2d6f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.1-tuxcare.6" } ] }