{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:007da45d-6699-5173-b2e9-7c470ebb01a7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:68dffe27-45be-5dd2-8c9d-be7fdc8f194f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:87d27991-a734-5c8c-8bb3-be360383d8d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:97e00180-1931-5574-87d7-7370e68a31f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c6ae9181-ba82-567f-81a2-ca37d1b20f5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2220eb5e-f78f-5990-ac04-9dd35e7b3aaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b44d7407-ef6d-5c0e-a069-1dff2fa79705", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a80757ed-1217-5872-aeee-720ba9233dcf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b2519434-196e-52fa-b46d-5e87e6c2bea5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e184965d-ef9f-5455-9a48-7cf1d31ffcde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a1ac2be8-09d2-5184-a2a3-70ea1e8f35f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:56ce4fe6-6bd3-5885-b306-121e76d13c13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:48dd4d02-ddb2-5acc-9e76-20ca655d35e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6476adf3-acce-5135-a12d-de42805ecac8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3e2969fa-b5e9-581f-b023-a429f57893ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1fa52f1a-b5bd-5ff9-8e7b-e92c253a83a8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:13dcb5a6-83d3-57a6-9323-7fc2279fee28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8a7c8ccf-bfa9-5702-83eb-2f54ed845cb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:dd64635b-697b-599b-94df-255e2e3662e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d54ac562-a411-5034-ab69-13bfed1faf15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f066c3e1-0eec-519b-be3e-2561762b832c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c2b096ab-f56b-511c-bb27-9ec777a99e5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ae2ec8f3-ea05-541b-987e-be7609387dbe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-instrument, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:337c81db-b207-5731-9ad5-ba37b9d21ab8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b787138b-6499-5534-95ac-b273dd2598d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:02f2cb76-a175-55f7-a257-b3a7640473e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:511caa1d-e1fc-5880-a00f-1927982907e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:eac592a0-1866-5491-b6c4-1fe07e74a42b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:89d5dc8e-6064-5079-b1a5-4b3536cbb1e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a006f6fb-a336-508c-b67b-33fc6f1e5521", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e6d573f4-3747-5131-b1f7-0166d42192fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:34986a3f-bed2-552d-aaa0-7298a8441ba1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fbdcc159-27a9-5cab-87c6-d6b6f79aa6b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:42aa7e74-4a2a-598e-af02-434610e8db6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2018bc83-7c83-599c-82b7-61e197fcef32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e52b7614-a929-534b-8dd1-3f5bc5a1a65a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:05633374-9a34-5680-8f8b-3b8a77e9bd05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a0e932f0-5e23-5391-9926-1980fdc6dbd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d63e5531-0fbe-5cec-b6ba-f6e5e0649a8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d6422ad8-7c95-55f4-989a-bf1d6ebad509", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:12de5cb8-a3bd-530b-9da3-301eca8027ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5606e351-81d7-568e-9e53-b98f945205db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3dba0efa-4723-5450-9ba9-7f8e552b6aa2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7e83623d-c083-5edc-a7f5-f0c7777fbd2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.2" } ] }