{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:681e9347-a338-5a96-adcd-5044e9cec2e2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-webmvc",
      "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3",
      "version": "6.2.3-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-webmvc",
            "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.3",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ef01430c-d94d-5489-b11e-6154f9089a1d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:51315804-ba7a-56a8-9263-23056b5e4946",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1cb00598-ada3-574c-b71d-9677765c98fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9caf6ae-e96a-5e93-b2f0-d52d81823f56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cc8f1a8e-1a8d-57a2-86a2-904df5e1a7b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:25292faa-4efe-59ab-80d5-f6e0dbbb10dc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:be3bdd52-c29b-5691-9a5a-82c86fd73ee8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:efbc487d-4d8a-5436-a4c7-24ffa1f4fefe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:23ce6ce3-1e04-5b70-9895-50c4d697215a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ae932328-fbe3-52a2-a385-8bb99a315caa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f37ed8b0-afa1-51aa-b6ad-a5c346fbb103",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:933e8a60-9ddd-53f0-b326-4a986f1ba42c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3cd36bd4-6614-5169-851f-3a93dac3347f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8090eea3-c279-5fa4-bfdc-e5f6ae80ca13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f768fd39-b436-5136-8c15-e15555f06d28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1ce42d7f-69c0-5269-a8c0-8af5c890a0d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d96145d-2ce8-5afa-91d9-ac0d8b29afff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c52c3627-a229-5d47-8efc-e8f1d2b17bfb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:540af3fb-3459-5cc8-b8c0-0cac60f4f8f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a84b6fa7-d582-5da0-ac03-58c1737d21db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c5247f49-62fa-5f1d-a314-749b388e1ebd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:75397c52-73a7-5e9b-8f60-12001ee6bdc4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:94e7f613-1e40-52bc-aec2-9796ffe346ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7bfecd23-9ddb-597f-bd6f-d5a905616b24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:23fddce0-cfdd-5969-8c84-95d0467c4d63",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:34f8ca42-05cd-5d1a-ad32-17946ab23129",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:07d56511-57a5-5b0e-93c7-5d832639a207",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e09c529c-3ce0-5a12-bc99-d8adb76aaeca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:39f421c7-b012-58a4-a1da-25b04541da6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:385010b2-cf8d-5f97-9b81-f4bf278a6c4d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0d2b62d3-f517-56fa-9b3f-35eb4ec11777",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0abfa8bc-1f42-51a0-b9a6-f0378cf46b48",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8f246d81-b3c4-539b-a6c7-ec7ce4bfa951",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:24de5640-12da-5076-9d49-6836bc8b2454",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:466b84ef-de0d-5256-83a4-fd718fbc0017",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6e694819-c098-56a8-b6f5-b483b819389d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e6195606-8bef-5112-9c91-8cb0c87b0e96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a5d51c50-8f6b-5aed-b0b7-c319b1d5aad4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:86939873-a490-56da-809b-0f21c237790a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c53d33d2-be98-5deb-9d38-42c200b46223",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f3a6229a-a429-5412-b982-8095e27ad2f6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:eca2d4d4-8286-5eb5-aa49-f74fdddf035c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5064844f-a0df-5446-87c1-b007409a17f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-webmvc."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.3-tuxcare.3"
    }
  ]
}