{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6d9fe315-dff0-51f3-81dd-b50ef5f8e4d9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1", "version": "6.2.3-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a7cfc1ff-ed48-5271-a8f9-96054d74c790", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0f1db5ff-9948-5749-9414-b51b39276a94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b0e263a5-2441-5c0c-9955-9c02ad3d4a95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5ed03d3f-52aa-5ecb-811a-68ec989811cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3408bd44-b9ea-5d7e-b03f-b62339257e08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:cf3db437-dccb-553f-b667-305daf0d4969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:46a512b4-c01a-5e44-85a8-cb1e24011747", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:05ba0626-0c80-5cd6-9495-f45d40f8e597", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3943fb81-bbef-51da-80c8-58f00a4d8a46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:93dfc14c-b889-52f5-b158-0116f795949d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d57354ba-c82f-5539-b96b-ee6a388b60a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8b346a2c-eb86-511d-8723-678f6c283c7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e033a708-6c77-52d8-b320-e554afae75e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b9a2d4e4-fdde-530e-96a3-07e7d96207d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b88a7209-d896-5d1f-8940-6f692053e7df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2465d08e-9b7b-5368-a07d-665ba2e306ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a27d67c5-9144-52e4-b9f8-4caacdc0ebb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:07051d51-aaf7-57e4-98dd-5c2983ed085a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9acbbebd-81b2-5869-bead-9ae3971184ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:76f696b2-6b91-5fbd-bb25-a94095ad2379", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:982cd926-ea1e-5da3-aa3e-0fa7f459ba5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1a2f12b7-88dc-5f08-87f4-b8d5b2d4a3c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1317eba5-cfd9-5ca1-9d01-19f8f5bbaa58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b82e94cd-30c3-5e6d-9a5b-b5146cc6a53a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ad32db46-0df6-51b9-83da-68f840a40e1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f5ba0eaf-2e31-518b-9275-374198f8ddfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1fae93db-9276-54a1-bea6-7d138dcc681a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ebb46579-d4ba-5727-8328-a05082783cb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1e0764d8-7478-5917-802c-f5fc27ce1729", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:dd2355f3-ac53-5689-95d2-2e4b663911c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0bcad0cc-4c00-56e7-9b02-00a996bfd5ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:76ea5b8d-a5b8-5edc-a280-02ba10176658", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:88706b2c-cbf3-57c1-a8d8-3324a35ebe9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ddc640f3-4e7a-505f-851b-c2ee8da63399", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:83acb784-2bfd-5a9d-b905-882e9babf170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8d52a819-082f-5481-a739-dac68ab153e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2c0958b0-1ef6-5072-9b23-7f765143dc42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1c0b3ef6-29db-59dd-983b-854164dbe8cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:dd31236a-1204-535e-b906-139de8c42e45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6b0869c6-866b-51eb-bcce-b46c75f9514d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8001dbd6-60a0-5167-b8b3-65062dbadb74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1731c3ec-82e8-56d3-95ec-87a9d258d10f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:75982e45-8670-5420-9145-701e67ea03d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.3-tuxcare.1" } ] }