{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bb50e23d-2c73-542a-b021-e77df6330e71",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1",
      "version": "6.2.7-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-web",
            "purl": "pkg:maven/org.springframework/spring-web@6.2.7",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c6eda283-9df7-5004-8004-d952bd450e57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d619c882-f909-5785-9bf3-515e376a48f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ba4e15da-cec8-524d-8234-772f07f8edf9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:06844739-223c-58ab-bfe3-3d9fa680be2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:555af701-507c-513e-9d06-7b4e42295d22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:023df617-eaa3-5560-94c7-a0c336d300a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:89b06d77-0030-5f56-9178-cb9556cfc9e7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec876549-26cb-55ac-95a0-731d58c3c31b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e7a7fefb-8096-54a6-8e50-7c7a3dc69be0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23fe9115-cb79-51c1-aeed-a43500af7c52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0d3523f-fbc5-5e4f-8957-21e2477f3abd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1cc4aa77-3c0d-5efd-a506-3b9290216ab5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a4311ad0-fd68-5a79-ab0a-f39cdbc220aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac23cadb-22c7-5e77-8f86-44e42851f336",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:313e0675-a2dc-5820-ae53-8491e6dc7ceb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:110fe782-c460-5fed-b82e-b87c11258711",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:12b8f0ec-6af9-5e12-a013-e760de4481ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ba09cb5b-a27d-5b47-9535-1a4cb817ebc0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f196f31e-b2da-5ca0-9922-9524794fbfc9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9f7fb3ca-3024-5dae-b738-3640c0833179",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea134eb9-ed08-560e-9612-c0136a1649e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f2abf827-35fb-54e2-b870-defeec7d5d70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5df5faa6-8fa8-534e-a056-a251dfee5758",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23514f4d-690a-5109-a283-986e85e8ada1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:10db69bb-f463-53ae-8246-1e2e90a22a01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:25902249-b7f5-5ba5-8adb-1c2959ea025a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1fc6ced0-f327-5893-bac9-4de816150718",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cdf06432-414b-5e7f-b8db-08c29168cdf5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9a738267-ea80-5183-940c-b68473ae7976",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:98ab9579-6641-5455-8194-3a9fe728a352",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aa1ad333-6d0b-552e-88da-7e1c258091db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a2e1e6af-dfff-51e9-b276-10f80ae1bef5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:12a3e99a-1c10-570d-9351-bf9640860b9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de2fc8e2-b206-541e-af31-29d49dcf1948",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9ea49eaf-db08-5c02-ba12-e87fada0e6cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8ac76984-edb0-52a9-8e98-44fe9eda7b2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:38cd0cf2-cdf6-5b2c-8aad-108faad2b4bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:70b599ae-18ff-5e01-9a13-3602d30e398a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:80aab2e0-67f5-55d6-88e6-c3657e722206",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:deb7b90a-2714-5f0c-a66c-4bfd3d6ecd75",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:18e97e55-8b9f-59e5-88de-f8695e6f42bc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0e96cd2e-860d-5052-a904-5410fb82ead2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.2.7-tuxcare.1"
    }
  ]
}