{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7ff191e6-f2ca-5104-8c90-cd29bd3d5b07",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4",
      "version": "6.2.13-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-web",
            "purl": "pkg:maven/org.springframework/spring-web@6.2.13",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5f680a76-ffe0-5f0a-b8d5-7bdc2c31800b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2e264401-90af-594b-936e-93a5faca9608",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:211720bb-177a-58c2-be19-95c491eb6c48",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fe2b2c59-3deb-5b49-815c-dc1e5265f3ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:649fdd86-41e3-5499-9e1b-4cd1415b3d30",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0031be7f-596e-55ed-809a-52eca85e4573",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:364bcf51-e938-529c-95ae-a5f1cfe46408",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e403a66f-e12d-5222-8e82-f23443ca3096",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:111a0279-d079-5c64-b311-62f5e28ac38c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cdeb1380-1426-58ea-8c56-bb077dd1c847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9cca7d62-7796-538a-86d6-a0c2977d3ab2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:592c52dd-8116-5d26-9447-17311c152a38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7185d93c-0a52-5acb-bf8e-feeeb7b8c3bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d0c2c863-01c6-5ec6-bd01-1038465e8a13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3298a130-fa6b-5302-a3d3-cab9f9cba5df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8e5ec2ce-2fa4-5aaa-a1e5-e84e1299cf87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:764bf798-681e-5184-988b-6dbab6fe49a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a7da6339-82bb-5f17-a3c7-0d579c146a1d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:eff5d9c3-2a71-52ba-98de-a690e393633e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:065e1964-d27c-5fd6-a2d7-477fbdcf821e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c6803cf4-2fbc-5e1b-adf2-f63c4c8009e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:036d1361-dd07-529e-9405-d26c9095540b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:db40ae38-81f2-5a9c-8e40-6166f0431c92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d0ba9558-2c97-5a9d-b69f-4a9270eecf71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:96beb236-1f5b-5e82-95be-116d6ed2942e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c518cabf-4752-57fd-9c76-5c3608640f01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4c6a1e3e-468d-5b57-99bc-489353f07c4e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c260a20f-cea0-5656-98f9-df95f929fa5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a4f30a5b-2e6d-51a7-bb6e-5768c9c4f729",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:98ab4519-7fd1-5c97-ade9-4eb23b3a8d2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:60c11fae-c411-56b5-9118-9c0bcf105349",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6cdb41cf-ce85-5a40-a6d7-b1a65dc96ced",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:98eae2cb-a3cf-5b92-9d61-0c8e8e47b58b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:31a460f2-b8cf-533c-99f9-abf2587fb7c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:be29a796-ace5-562b-b40b-f83dbfc683fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:98e32078-8781-51d5-8587-e20f641f72cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3886a64c-29e2-521a-91e7-ead0a9d04ede",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:680ca853-0929-504d-9eea-a06c05f62cad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.2.13-tuxcare.4"
    }
  ]
}