{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4cab979d-b4bd-58b9-abde-8e80c8ba8782", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11", "version": "6.0.23-tuxcare.11", "pedigree": { "ancestors": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.0.23", "type": "library", "group": "org.springframework", "version": "6.0.23" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:a8ee1b7e-ac9e-5a7e-b680-2810358f0171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:0540a272-2b66-56a1-b080-017e75659ff5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:9d730bea-d448-56a8-8f82-76c7543f6d91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:2f6c7241-4ce7-5b20-994c-b2232b991d1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:3ddff767-8829-583f-a40b-bf7468e59ce4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:3c7d9e16-3df3-5511-8e23-8e88bf84082e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:75af4020-5942-590a-80ba-3a2e8910810c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:dde76a4b-7745-5637-a049-c45e55f352a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:e02a9560-20b1-53d9-bfaf-f4ac27af3814", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:b722963b-a9d5-58f3-b548-aec15e511066", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:8fd81484-8caf-5d44-9af1-85dbb0469460", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:91a4fed1-1061-5165-955f-0c2ff660fb28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6b6cfb03-5a5a-5806-821d-386e837061ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:fd85b7b3-c095-59fa-a01b-ba862b27d905", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:d48ae9e0-bd74-581d-a9d5-d489982cb01e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:7b40229f-73cf-5a58-93fe-cf80643345b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:d30c9aa2-4a9c-5c96-8c47-f5009eb25d22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6a81542b-2f59-5e18-bd16-203114897343", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:4b32b3c6-248f-505c-813d-d847bc7f375a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6ee4c8b2-3da6-59b5-8740-6148cdf6cf30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:11b926dd-432c-5c6a-9598-078fa6f5e98d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:4fb7f42f-8f00-586a-8f73-603c752a565b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:17eedff1-0542-567a-a0b0-b3e13ee88eed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:a2365d26-136f-5964-ad4a-41beec4658ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:019436fe-c77d-5ee2-a48a-7f26f9841dff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:fb5777ef-a61b-5ffe-82d1-c1be925d715f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:468397fb-bef6-5fe9-a974-79198296f264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:34cc300e-ae7f-5b29-a1bd-1cf25dcee509", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:87bf4c55-0498-56fc-9616-62b472957241", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:5bb6cefe-78a4-50f0-86ac-4c84fd7f16ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:81441920-a816-5f77-b264-2ac94185d193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:0384ba17-3287-510b-8e39-32ed0cbb570b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:b3eca0c7-fec6-5ee0-9c29-6503f533b7ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6e51ae7d-81d8-544d-a417-3cf69ca8dbc4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.23-tuxcare.11 of org.springframework:spring-test. Spring Framework 6.0.23 is not affected by CVE-2026-47890. The vulnerability is specific to the Fragment rendering feature for Server-Sent Events, which was introduced in Spring Framework 6.2.0 (commit 622c1b9e8c, August 2024). This feature does not exist in version 6.0.23, therefore the vulnerable code pattern cannot be present.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:fbb799cb-5c4e-51a8-ace7-d20a817121bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:58d46a70-1140-5c22-895a-82cf2f7b06d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:cb08bbd4-fee1-524f-adb2-1fae9584edf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:3bf0c17f-486e-520f-948a-1ecf409c1a97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:53e42e18-1370-5657-91f9-a4baf9883803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:10792f94-350e-5b3b-aafe-10e21c7c201c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:a59fb47d-24a3-57d2-b721-c9f180a9f59a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:9cade162-c2b3-545b-b007-326a4ff3219c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:aa542ffd-f4f2-5dfc-8771-c5cc11779954", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.11" } ] }