{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:990e6f91-e472-5d08-af37-201bb12bf06d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6", "version": "6.1.15-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-test", "purl": "pkg:maven/org.springframework/spring-test@6.1.15", "type": "library", "group": "org.springframework", "version": "6.1.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:8b498c66-07cf-5177-a38b-9b1c00510fb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:8bbc1d6d-6380-59ae-9422-23b8d76f4d91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9d476aeb-e18f-5a22-bec3-3a7991918c30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:c8e50fe0-5b89-5d06-a6fe-da1af5d1b595", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:089dec2e-7d89-5a87-b570-de93980088e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:64e55761-bce9-59c3-8387-c6b999814022", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:e7ac7dc0-db2d-5d4f-b4b9-0cbdbceff44f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:1d6ff771-ccba-5ba6-9f38-ea57eab44c22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:b5bd2c51-cf42-5579-ab50-022b4e7fecea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:f4002edc-129b-5332-9a48-198ad8449d41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:41d36016-e8dc-57e3-b4cf-03dfadb6c77d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:452d5c4c-4329-51f4-bf9e-5915ddea0a66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:b16f172c-be5f-5321-98f3-bc7eb54f8d3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:05513f69-311c-5fa3-8985-aca43453a7ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:b61f6e86-515c-5f5a-b97b-02be21fbc1b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:d94aa99c-74d0-5cd0-a2c8-94fe73c9f0b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ec46e615-4787-5170-9a26-4875580fbed9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a7938a77-019e-5c0c-9c87-14461dc25a84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:5226138f-02ff-5132-9752-1744235032ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:5969cfbe-83e1-540a-8cd5-2a61e5042166", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:e6813e2d-ddf3-564b-9723-f21779187d6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:afe3294d-e24e-5814-b49c-0ddc9f9b4899", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ab220ae1-8bf1-58c9-a1ec-067fab544528", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:89b9ce2a-eac4-5bea-b239-356398e89730", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:bd7d2d15-8345-5d47-b4a8-d421c2b680dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:f68c9347-1bc9-58bc-9029-f91b9ec46b3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:df5e9d3d-3666-5f06-9177-ca9ed0acf436", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:615329a7-ccf4-52fd-9db3-45fa3cb71092", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ce309858-c595-5711-acaf-bab50e78c4bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:6c94b4ad-8671-56cd-a2d2-da72ccfc0b27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:6eaacbec-10cd-5a03-85b7-1452ec0f0591", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:f1d54591-8458-591e-98df-c729ee633c29", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.1.15-tuxcare.6 of org.springframework:spring-test. Spring Framework 6.1.15 is not affected by CVE-2026-47890 (SSE view fragment stream corruption). The vulnerability exists only in versions 6.2.0+ where the Fragment rendering feature was introduced. Version 6.1.15 lacks the entire Fragment/FragmentsRendering API and associated SSE view rendering code, making it impossible for the vulnerable code path to exist. Git history confirms Fragment support was added between v6.1.15 and v6.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:01c6cc62-1c0c-5361-ba21-2180a171f475", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:bdbabbcf-e33f-52b3-acc6-c6f321bf0b8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:7a0c12b6-527a-51b1-8cc8-51fa09f38b97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:7b3a1dff-57ea-551b-ae3d-c1958c85da9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:afac1a5d-b9f4-5a1e-923d-3b796c57e48d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a142010f-3206-546b-88a7-8bb797b2f6fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:01e9cf61-1515-5038-b460-68dac13975d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:dc0994e2-54a7-5bc2-b409-61ec9c6d6cbe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:ad74690b-2fb7-5357-bee4-81390792fe30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-test." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-test@6.1.15-tuxcare.6" } ] }