{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d50bf578-5e20-5e58-899d-d957402b5c4f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6",
      "version": "6.2.1-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-web",
            "purl": "pkg:maven/org.springframework/spring-web@6.2.1",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.1"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8fd1c284-5bf2-5e31-9f7b-aff9e2081afc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:59249375-2c5c-5e28-bfc0-a8dee0ec7bf8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:49d3e351-9409-5179-9a36-882463f5c0ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:99dbb3b8-3821-5f9a-b63d-9a3ee81de555",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9565d8e3-0798-5f01-b224-84e0eaa194ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3a1f6f2f-d38d-56ea-a8b2-6fb2edd009c8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8e03926b-4b5c-5b57-b9e9-a59cb858355a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0d7c5577-9aba-5ed2-b6a6-ee9717fa9f7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a56b5009-95c8-5dbd-a670-54441eab6cc6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8dd2ffac-9566-512e-aac2-c79add16fc3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c4ff9852-57f9-58ed-b526-8a5103a1143c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b47960fb-ac18-57d4-a7ea-370111dbc815",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:eb6b5015-a0eb-5095-813e-e019f724fd3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:29688f16-3b4a-5cd0-bfee-bfd8c14dd0df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fb6ea91e-9363-5e9c-a6a9-d3099222fb47",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:489685db-97dd-5e13-84f9-0731bc34af51",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b326c510-94d0-5649-a368-616e3e595993",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:36d8216f-7d49-50fd-8ba2-04749d80a4bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b40eb650-c4e9-512d-a9e2-ef6102e58a27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5d6b31d8-f1c1-5c7d-b257-aefeec675192",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b51bd566-db90-5593-9d72-6430e8c3d454",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0538f4a4-d244-54f0-a4ab-1754e3ce87c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:95ffeff6-aa31-5203-a68d-5528a5575f27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:91387540-a038-5c6f-9696-4f144d0d2d9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9a463612-c8d7-5344-87ad-252b7c4480e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:afd989ef-a6b9-5082-8960-1b5333ccb0ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4ef931e0-739d-5386-81cb-85568af984ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e975fbcf-cc2b-51c4-a17a-70350d3a0a93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:00fec767-0e9d-59aa-94ec-cec63b2be09f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:dd4897c2-8495-50d0-bf71-77bf35105ed1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4f369b9e-f4f3-53ef-8e27-15c05f8e3559",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7d526843-1c82-5b6c-8d6e-c3f0f2133aba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a6e13a02-e4f3-5d87-b4d0-f0b279a4361a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:823507df-8cce-551c-ae7d-be7de2187e91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6f1fa62c-db7f-5bca-ad27-f9d4b0e5bfd2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ac01f0fc-7048-57c2-ad27-03346d250a5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4c18927e-cf0f-5108-8b26-f11abfbc0502",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5b855b73-16cb-550e-aa15-b93157829f6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1d4b80f8-1f89-502e-83f4-2492a33791a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:64cc4fad-c9f8-51fd-aae8-5d202d90e0cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0758b9ff-32da-57d4-895c-88bacf0bf50e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f8a34fb3-fb1e-58cf-bfe5-de1bc9c1d8b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ca9ac659-c997-538b-a601-fffd11b924ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.2.1-tuxcare.6"
    }
  ]
}