{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:360490c6-1088-5810-bd1e-fe96e3bd9611", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6", "version": "6.0.11-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.0.11", "type": "library", "group": "org.springframework", "version": "6.0.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:af32e2c0-4efd-5cb5-8f21-72556d7d1f66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0759a41d-570e-5ce6-be79-d67ff10392ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:effe81d1-7f1f-5da8-92cf-d0a601ab72b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9fc2660a-52b1-59d7-a637-2ea5008a7903", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2b6f787e-7629-57fb-aeca-56bdb5664bc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:12973fc4-b2b3-5312-a7e5-b1ebe73582bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:54e41b47-c283-5016-8774-c904e1105f78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:285fc6f6-c6c7-586c-90e9-25ed1466457a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1d76ee19-cbb3-5d0b-8925-632bf87945e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:81999e2c-1c28-55f6-95df-44c21f367a0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7c093b45-130d-5642-b59a-f5d2caa6a04d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:60388539-efc4-5433-af12-669be28a6373", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f84a5f67-a14c-5e05-a837-779731aef9a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:6fa73285-d303-5a27-9228-56fb80bd9145", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:94dea857-b350-59cb-825c-3bae4ebbf692", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0730f3c0-98d4-5c5e-bc70-5bbf49f16add", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9c078c47-4f8f-5380-b1d8-ddf1e9b7b5a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9b54ae41-66fe-58ba-bcba-5e47c1710fa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:fa76b9cc-f369-56cc-a1ab-6ff03cbb77a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8ddbcbc8-f84d-5927-b10e-303ffc39f1f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f90f876b-17fb-5ef7-ba35-7435347c2fa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4de957af-7231-545e-8475-b37f068431c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:361ead75-459c-58ef-9bad-9f2b0ba2e3fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:83b0d8bb-0752-5d8d-8c6f-2cd954f24986", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d58c842a-32d8-548b-aa15-e209baef49cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cedbf71e-8e30-5356-b6d3-2a5005a7753a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8fecd5cd-da54-5272-9f07-e9e622274c93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:03b1440e-3a2f-5162-a49b-536e39196854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9a5605ba-55b8-59ac-b620-e769d2df67cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d4b13e11-8a93-56ef-b2c0-44d427d4018c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b290e8d5-8a2f-5d4a-b652-fbf1988b4810", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7f3c3ca9-6877-5764-bc02-4a387ded6e38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:3e216539-1361-56de-ba6a-4e025d888f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2577f1b5-06d4-558b-a068-b515b83fc46f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cb2159df-d778-5400-b61c-eb458afa9ede", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c4e4855c-4631-5178-8bd6-5013fe0b4ceb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2273af66-bf84-5003-9eb5-46e2437ca458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a3902d3c-b03d-5c4e-832e-3543e3a82202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c79444b0-5ee3-5f70-99ba-36b166be7748", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.11-tuxcare.6 of org.springframework:spring-test. Spring Framework 6.0.11 is not affected by CVE-2026-47890. The vulnerable SSE (Server-Sent Events) view fragment rendering feature was introduced in version 6.2.0-M7, which postdates the target version 6.0.11. The Fragment class and related SSE fragment escaping code do not exist in this version, making the vulnerability impossible to manifest.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:668c8275-1461-50b8-be00-b9da00a7b6c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8a110976-aeb6-56e3-a681-deb6ec1f4189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bfd81d7f-00e8-571b-9b15-54a24bbd24cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0f766dfb-9402-51ba-bae5-59641f729a94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7438e762-37af-5225-8419-62520c93b587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cb4a7909-ff74-5979-982c-bf781e000959", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d6d5c063-a7cd-5e10-ad5e-6116b490599c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:34503c94-fa10-5a30-ae19-4d0479913140", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:864702ff-667d-56b8-9e59-05dc189e6afe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.11-tuxcare.6" } ] }