{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f6698bce-2042-563f-a049-eec95b58dbbb",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-webmvc",
      "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1",
      "version": "6.2.7-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-webmvc",
            "purl": "pkg:maven/org.springframework/spring-webmvc@6.2.7",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8510a888-b70c-5f06-85d9-2aa31e498493",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2e9557e3-9686-5243-b4de-462f55f6a79c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:72235eff-8dda-5fe7-848b-ceb3b0519e7f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:409b0aea-3d07-5dc4-b174-2120cfaa678c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:655e9085-e4b3-5504-8727-f977aa0bad9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9751c492-6016-5c91-8b68-ccba2d6280d2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9f165edf-b969-5500-9445-6bb47ccdf7e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cbc2f3c7-096a-5ed8-b772-3b4d36d65365",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:23231e0e-f191-59de-94c7-dcc0356a01ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ef0788c-8694-5d8b-82e8-6426ca4fc9c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e32151d0-a528-5f9d-8190-1563ba89f734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de991c7f-13c6-5e2a-9efe-dc7da13dd40f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d694d4bc-4a37-587f-a40d-c66ab42a51cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:34e2d840-f7f5-5bd5-b0c3-832e1cb1a1f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:581ea4d7-f35a-5621-a149-b849bd4a9ed5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e2bd68d7-4045-5af1-9d1b-a5388d5fac29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4bf9e9a9-4a50-586a-b2a4-ef5300ab2bc0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ff20496a-2ce7-59a0-87f4-91f34deb4636",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb7cb05c-675f-5db1-a3d6-6a7d3e154e92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0034ca7e-b4c9-577d-8413-aaed22d6623f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:355ac14e-dc0d-581f-a3dd-f2372062f06c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5ce86e85-d723-539c-9fe1-9d5dc9401c4e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ba9f5095-ee6a-5bed-9263-dd8cdcf1813d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:54e22e45-6394-5b50-b223-93650ea6ca18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b7c6debc-eebc-52ad-bf0b-b96d7a7b9278",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8582d901-2f55-50f4-b1b8-9eab522fc71f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fa56ab71-bf87-5cdd-aa5b-dc3e38afeb2c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9b7763be-abb5-58b7-98e8-50cc9b0f4e87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02dc2045-e0a6-554b-baed-105d3f2d8d21",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:129f344c-070f-59fd-8514-5ee8a9c638ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a6d5ed2c-bafa-51d3-9a15-c8aa9f0210db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2a7f67dc-c45e-59f8-8e33-888e70484f9b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8e967f54-11a5-553d-a368-8d119aed4995",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8a6d53f3-a04b-5a0b-a172-27bdc1650a56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6dea1fba-07ff-57b2-a482-d4851ec75eb0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1068e58f-46fb-57b5-981b-0b30d1167339",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:257ad73a-4c15-5b3f-8a31-13c8ba8df779",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:47f8e8b3-3649-5c88-9c88-50e528fcdf53",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9df98ed7-4635-5096-9411-1d068c29822b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0d8d254a-bc12-5830-af47-6877d61f4537",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:839ae7ba-4566-5032-a2ea-559de251c52a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8df3fd7b-74b0-5771-ad5d-6d4598914a4d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-webmvc."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-webmvc@6.2.7-tuxcare.1"
    }
  ]
}