{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:cd8230b7-d4f8-56a6-a59a-06f15f54a3d2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3", "version": "6.2.3-tuxcare.3", "pedigree": { "ancestors": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:e8580773-b3f9-56ea-99f5-e7e97c90fde7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:8e8a3dd2-be79-5c28-a594-8eec2ecd617f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:73cc0804-af2b-51bc-bebb-f3d3569e1157", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:d6a2a6cc-24a3-5198-908a-7a245d809ebb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:4d95d289-4c91-5de4-8946-6683f1a6975e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:55fc993c-32ea-52d9-8270-148166c8390a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:6b0fc638-781b-582c-b96f-1bc4658b5d52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:1a66049d-ec29-55d0-b057-b75b92292c54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:799f9a0f-0841-5302-b349-ff9c6fc642d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:4c6e835d-05aa-5fe9-acb8-2b58891c619f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:3f7df882-08ac-55f8-aa06-ad1c37810fd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:35f1da91-96ab-566c-ae69-dc9c834e7ce5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:cdb32dcf-7ea2-5e66-8b5b-0498799c1b2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:11993098-fd46-5bfa-abaa-dc54b4aabf26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:f212aed5-af94-5d48-9588-10b3665b03ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:dbef8d27-bdc9-5b2f-8d55-b98deb93cb15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:1bdb1ffa-c278-5fc1-8af8-a5a041e31bdd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:0caa68e5-8b24-5dbe-bad0-4751e9c0f0a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:05c73c2d-c065-5743-a4ae-a7933f60dec3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:b5ba9ea8-2069-52ca-842d-49d2eb491a3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:14677565-070d-501e-a440-d8099504d9e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:b6502907-7932-52a2-90b4-09068da38544", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:54731bb1-308a-5d8f-ad7e-2cb9c6444217", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:cce09e3a-a569-5337-bada-14d3ce27744e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:460b5655-89e2-56da-9cae-67432b59bc30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:3c8b7602-3aba-5653-a420-cda1401def4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:c66c5868-034d-581d-bd02-3f662f3e8ee1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:610ee88a-afcc-5a2d-a578-0f4052a5b72d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:ba75dff0-1db7-52ec-bada-8bd92dc1dfc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:b1098703-cee6-5f76-a917-e6b86bf83905", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:f7586d13-b523-580b-b503-e86611a76088", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:28819a0a-214f-5918-853d-eb33e14c0103", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:b0efffdd-07e5-58a4-8282-41c85f0d9d46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:9b0e4474-9c25-5a61-9301-f376009cd969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:7391eba0-8493-5526-a466-779c1aa61b44", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:4dd05383-af18-5d66-9d48-7955891af4e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:46980413-38b0-5817-86bd-a9edb812e51d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:75dc86f1-8a61-55ff-9ac5-0fd0a799aef1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:e40bbc64-a12c-5db4-8852-4f3d6a1ce0ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:d48d7f68-8c1a-571c-8b4e-7288bda9b8e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:049d1098-ff64-568c-abd4-01d3f0d19544", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:dc155216-2740-5c61-ac01-c1ec039225d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ], "bom-ref": "urn:uuid:75948345-d464-513a-a54a-6686e79f536c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.3-tuxcare.3" } ] }