{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:61d495d6-9ae3-5ed6-bbb6-53ba8e95de57", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:24a04355-30bf-5542-88ac-6ecbf73330e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d9044e49-aabe-5b65-a7c4-4d086d17eee6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6fccd008-6cd5-590e-87ea-8d807702deff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:60b31b5f-4a6e-52a5-ad16-c24a92aa9050", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ef36724e-6ffb-5d03-a447-7f9166c87676", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:cf6f8798-43a1-5db5-8c76-d1c762c07efc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:51fec665-f220-51d1-baa5-75a8365d5931", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d89b19ad-12f1-5488-b773-01766e5e697f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:06314b4f-6232-57e4-abf7-c9ea8b298834", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1fb38222-c786-5e6b-aeff-9c4bad06312f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a7f45d8d-e358-5c34-83e6-3f6bd3fea8f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5af04500-1aeb-59e6-bd89-a846e05977d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a14a58a5-8edb-5efa-a453-35fcef299727", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:30d845f9-9b30-54ef-b963-fa444b1e98f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:828fc3f1-fc7a-5709-b571-be2184a4df7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1414edb7-1908-5db3-a8e8-447cfdc1a65e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:044d4bd5-aff9-5a63-a65d-3e458388e202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b3376430-f7c9-5b6f-810a-99325d4ca6bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2fb05ed3-912e-558f-808d-6ae15f6627db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:dcf1a686-bf55-583b-90a7-2ba676cd3bd2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:58bfa4db-2bdf-56fd-afd1-a6e1aae29a52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:29cf8926-d0fa-5e0a-97ef-36a272b10e35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-web, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:719f094f-0283-56a0-910b-64ec1c3ae23b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f6728932-316a-514b-85bd-e1b50b28a58a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:25d97dbf-85ca-5d7f-ad9f-4c26f86679b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e7fc505b-00ba-5eb7-8ebb-2154c0cbf9a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2dbdc31b-1e56-51ea-9242-12dc9d1ad16b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:84a30c55-d438-5c81-bac8-baf85fb19e05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f27744c9-dfb9-5aea-af1f-d7042b26507f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:81b3d552-46f7-54d3-809a-a34100d402c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8c24b145-34ad-57f7-9e7b-22f8fa167712", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:adb6f8dd-c427-5f43-b715-3c199a718c93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3520e430-1dd4-58cc-be67-edf0671a3937", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:608cf931-b1a2-5398-9be4-5f3b3381e8bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:039a47dd-fd04-5080-9a54-cfcd7ca35f36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1fe1aa83-905c-5c53-9554-9c5d2409045a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a79b320c-4739-5e55-949f-7538720a328c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:aa8e02b6-8078-5fbd-8c55-c73ff5052f94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3c0e68d4-2d0a-5f6c-ab5e-3a2af16c0340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8daad93c-4c01-5549-862f-85a8d03f1fd6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:88aa4c87-57b0-5ed4-9f97-a715fb287418", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:af0e608e-5624-5ea7-b656-c5b56f2fd07f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:99858318-b94d-581a-b254-243e1ae31d53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.2" } ] }