{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a910e52b-c3a5-570f-a7b6-310462d30699",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-instrument",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1",
      "version": "6.2.7-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-instrument",
            "purl": "pkg:maven/org.springframework/spring-instrument@6.2.7",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5c665d7c-d3e9-570f-9958-fc35619c8c43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:295eceeb-23e3-58a4-8f88-1e7cebe10b9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:135ee786-5fef-509d-9e09-1a381c41dcc2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c2f12e65-6502-5892-a377-5e4ea314d837",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c9a19971-31cc-586c-a3f6-f894b8785066",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:673995de-fb19-5729-aee8-e05777000343",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:496f74e1-a84f-51d2-82f8-4e3194abc94f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bda7f795-83f9-5560-8d6b-f5d3e4cd6ae1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c909efb9-b5d1-5fde-bf55-d1b85f3c0a3a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0a31b009-ec02-576e-8ad9-9f7ae70b6f0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:307f5288-27a9-5357-bd53-7a009fcb92f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:06fc5401-da60-5dec-8b8f-b2dd9b481973",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:392a2218-3dea-558b-8ad1-1652dbec31bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:579ef98a-6f98-5b3e-9cca-340531c01586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bc310f62-5bdd-5fd3-b773-af2f06f77a5f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c840d31f-7034-5d3e-8775-fee61d9eaa79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:829fb639-8b01-53ac-9b64-92a95dfeb227",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac541c98-9c83-5756-9330-a61fc0c64963",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:434b5cf3-d2e6-5755-bc40-1bfa6c2d9d72",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f41e292f-01d2-5769-9d5e-0c06dbde436e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6b56e453-8616-5c6f-a160-3ae15afee69d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ebe8b791-4c62-54fd-ac2e-54254af529e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7404213d-7d12-5480-a0ff-e8bd627e0af5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eab006c9-465b-57bc-a33a-c46eaa9bad31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:87da3269-61d2-563d-8d1f-2ec473e87750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ba622b5c-a43b-5b3a-9783-6950b339248f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dc27b07a-b02f-5359-ba6c-0ca815a86d97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ad7725c-0df4-5c8e-9be3-993d07c2e4d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ff1d6c76-d639-5269-8d64-f6388e42e1f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2b7e1cf9-28b9-5f9d-bc2c-4f1daeb8390e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fba03d92-311e-5cc9-9a4a-47a6c4925d16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83bcaafe-1e5d-5dea-a4a0-9f2e0272d9fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:49013a12-0f45-5980-bbdd-1c28663505b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b7c08872-5cb1-5e02-9847-c844f9b7aa6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4b3ffbed-6970-59c4-9760-b4a8633aedf2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c51d0836-cd34-57b4-be65-e9b1b0864a46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e0c86da8-ff99-5bf7-92fa-5a573f519fa6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2072f050-9cd7-5715-a48c-8c6faba06e17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:66485034-f3a5-5a6b-84ad-0292ce6bf505",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:71ffb675-6ba6-5000-af26-fec6cfdca13c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8e51d5eb-7d3a-5645-b156-668bd258c80a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8e96b28-e9dd-5e26-8021-820f1845932e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-instrument."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.2.7-tuxcare.1"
    }
  ]
}