{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:177f7496-b8d5-5e8c-bb4f-be051e93f010", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12", "version": "6.0.23-tuxcare.12", "pedigree": { "ancestors": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.0.23", "type": "library", "group": "org.springframework", "version": "6.0.23" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:cb92ac0c-d0b6-53ac-8158-8fbaa0bfd78e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:d5b84be2-cbbe-5e63-814d-de51fec8a05f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:cffc2f85-5f5a-5b90-a546-6e86c2584e9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:f9a19b65-cd5e-5a18-93ed-ff3eb7d96172", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:3f3ea299-f832-56d4-a22f-dfb7db083e7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:d4f4b803-43cd-5ef9-8764-4b5f20000155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:66c59c26-535d-5b78-b2dc-6fbdc6bfef6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:a49fcd31-33d2-503e-9f23-d88430389683", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:e9cab30b-078f-5aa5-a0a4-05b61822ea63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:e2d063fa-f2a6-57b5-b57d-6b60ce51df05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:821d1201-fda4-5be0-977d-a539172fa00e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:eb8c86bc-f12d-5cb8-a4c1-46a69d6b34e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:14d6c236-5d9c-58b8-a4f8-0afed95bb667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:aae87161-03f4-5394-859e-3e589b1bea0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:93a55581-5ac3-5f7c-ac4d-4af0f46e6af4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:71daf8ef-2380-56ce-b6fc-de85fc804d3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:a19fbdee-c7b2-561d-a52a-e87cb3751c19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:845ef092-86f3-57fd-bb5d-8d56c14251c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:20196aba-1d27-586b-be1f-f9522a16d9d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:49b8bc90-4c65-5ce8-8254-0b36ef500194", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:2a226fb5-6f61-5538-aa92-4aa77f5ae56d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:e283eeb4-1ee5-5e7b-8b0d-c53422510aee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:e2c2e2dd-5d2b-566f-81ec-6b804cf51098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:34ae7fca-09cf-527b-ba2d-707208285b12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:71d08c25-ff4c-5a20-a251-e2a8ccd2b067", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:b7212558-dd5c-5931-95d7-34d5978eb799", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:d8497523-63f4-5ed1-96b0-57d8173b3bd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:84ab9633-6ee3-57b4-ab9a-fd287eecdf7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:5d6cc975-5c00-5d2d-a748-b66fe7ac9637", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:2025cf0c-a0cb-5558-ae0e-35a7805baf46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:7a1b4dbd-8a0c-5fce-ad97-64b1548d140e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:423d067c-5250-5584-8824-e27252a625c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:cbc5a641-ce22-549a-bf79-d067fb7bc4b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:22e72e80-1426-52da-8d1d-04948700da87", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.23-tuxcare.12 of org.springframework:spring-test. Spring Framework 6.0.23 is not affected by CVE-2026-47890. The vulnerability is specific to the Fragment rendering feature for Server-Sent Events, which was introduced in Spring Framework 6.2.0 (commit 622c1b9e8c, August 2024). This feature does not exist in version 6.0.23, therefore the vulnerable code pattern cannot be present.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:d84f8274-2270-5cca-933e-763ef6430cae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:560063ec-4a7e-503c-a81a-8e77b29599de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:43d8656f-103e-5cdf-8d67-a6143493d245", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:733caef8-56f8-5368-be61-8b3dc05b8831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:28ee94d4-d8e0-54e5-9815-c58c9fbef08e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:428e1ed7-f279-5d44-bc3d-531d0bd89fea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:1d1cd42f-331c-5be5-9c21-418a4754730d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:349e74b9-e3c2-5f9b-8499-1cc2cf9b7e73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ], "bom-ref": "urn:uuid:43057a67-b94d-5bc9-8e59-4bd836476fdc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.12 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.12" } ] }