{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d96776ad-6452-5c10-b7d1-b262da22f7b3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-webmvc", "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2758283e-f016-54c5-9de9-1906d18a1a5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:07e0596d-d6e0-5d84-aa06-fcd64230835c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:cac6ba9d-137c-54f0-8531-7a8706b4f208", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:db19a258-62ef-5560-bd9e-78b8a80ae974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b57f520e-7950-54c5-a830-2929ea8b3274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:effe43a0-9470-5ab2-9aa2-6e4691985c0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:468493b5-1a50-51ec-8d38-eaf153952235", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5525b363-18fa-5a26-a4ee-459838b74f93", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:da2b2ffb-2b61-5167-ac4f-57ac9e2154fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a85b1c2f-5fbb-5568-b036-133c3fa16799", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8046de42-4361-5b06-b53a-b3c0673ade67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:425c7e06-49d7-50fc-9c70-c4c3bea119b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:53bd9905-c0f8-54d0-b4c9-cb7348005103", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:14baf2ea-e143-5167-b7dc-61697ded2ce7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:26eba33c-493f-59ed-9e07-027076ec92e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5a4988ef-428c-5612-8bae-49a539c04bd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1fee472d-31e6-52a8-bc8d-647402f98677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:bd9d056a-4bb7-51a7-ae56-5ed8af57fc93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:73c51232-ec10-525e-9d21-a296f88df6c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7cbc29c9-534d-51ba-947a-ffa6cff54259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8d320340-a854-5bba-9718-d97725cffe57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:aeba2f50-2c1e-5f29-bc02-de4157488bf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d1ff4a6f-50a3-5470-babf-354a21ce0c51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7b147a71-49af-5228-ae27-2928e6c47395", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:83a447e0-96b7-5596-a5cc-aff426b6b71d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:35a893d0-0d65-57b2-a209-3a2269dd6792", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fdcab5d1-2a39-573e-ae40-761cb3ae725c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9ed9f379-66b7-5d9a-a4bd-0d00e8fdb71d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7e95b97b-3a7a-571c-88f4-4f2312c3761f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:08d9a69e-2146-5864-8154-8aacb421eb70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:eafd8e28-3a49-5b39-9336-45980b9f89a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ea13161f-5f78-5b73-a348-f3b14f84ad7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c371a225-6a30-52a9-971f-da0e1bc949aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ad5981ca-59d3-566b-ab87-a75caa9a90f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:76dabdde-0259-5ddd-8551-421060021270", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b337abea-1473-5b58-bcea-b0b1d130aa7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c76b16e7-d3f3-5fc3-8199-8d8aecb296a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:4ba92a18-bbe0-5646-a154-594f422a3ad4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2d2569a8-1883-5b90-91b5-804c658942b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:881c9d69-7cbb-593e-9639-2bca630b7bdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:571d00dd-7ddc-5c78-8231-87b70d1e0413", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:aea7a231-a6f3-53c3-8f09-c1d3cb122c55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:789a6067-8374-5960-b6d3-7b37fe88d300", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-webmvc." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.2" } ] }