{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8921f499-66ed-52f3-8edb-bc945973ed4c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2", "version": "6.2.5-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:7416efc4-c73c-54ba-b644-ca6d0ef07144", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f33827b7-f08f-5eed-b6c0-2674c0ff37bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:736c58a3-decd-5aa2-8992-955e4128e5d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e145b3ed-3d3e-5e5a-a218-b9b7265851ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d0212986-cb85-526d-97bd-6f60848a8c01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e9581164-1f6c-5887-b580-f353aaaefea9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:d75d6aab-33df-5df3-bc73-3f225d737edd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:9e5f79e4-1ada-552e-9207-4ea2db8caa0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:651dfbb2-e174-579f-8604-c05763d044aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1e3c41c2-9116-5c8f-9d9e-b9864758a587", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:eeb4fa53-3be3-5ac4-a2a6-87032b5f2936", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:45287781-1194-50ac-ad74-4513511f88c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:aec9ad41-24f2-5f56-a32b-a9b861057c11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:19ba98e5-eb22-5f7c-a24e-00ed5f040cea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:f4e3a77c-f08b-52be-93cb-82ec8b2fe86d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1d89836a-990a-50d5-a438-57998067215c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:7c88cb5e-7cb8-5b58-942c-efe69c0fc120", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:70f05c85-7536-57b5-9223-0b720f297bb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:35a7c292-f12c-53d0-969a-b5e85ae8e135", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:95cde9db-3f46-5dc3-aadb-bcdedb8bb5b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:804a3abb-1489-54c2-bb69-a1b5609772e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:0c78c618-36a4-5403-a034-5396d799d4eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:43161aad-7895-562b-88a8-0122e389a922", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:22c7f8f8-0a08-5c4c-b817-e534a28f3ab2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:504061bc-f2d4-558f-9acd-fbad59c74e89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:6b3ad4cf-a01e-56be-9142-b4376f64b3ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:44e007fd-9573-53f2-8e18-218da2d8687e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:e20e106b-6aae-5be0-926a-2ae1e94f2d9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:84c147a2-0f10-5c9e-83c5-95b46f94d342", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:1b09eb74-8358-5537-b28c-dd56d926f28c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:6cb846f5-50bf-5f60-9262-e0e5b3e9d9ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:dc24935e-9fc8-5d84-9675-bb5918552f64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:2c259346-2a29-580a-8582-3aaa97b4ff1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:11f18779-167e-5b2c-afeb-cbe939d3346f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:3686ec22-e834-5388-a796-643a3e7f122a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:c296812d-a260-59e7-820c-22ff45f05b26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:4032c0f6-a658-58fa-b666-cc85c6269b58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:91b8f493-5053-504e-b61c-7d15887b469b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:9f282c86-edc0-5a0e-8084-fa77af93d673", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:ab9c448b-4931-5bd8-b37c-460566ed6395", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:c33961ef-240a-5104-84b4-2f644b2eacc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:392db8a6-e8fe-5f0a-820e-8de1c59eea2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ], "bom-ref": "urn:uuid:361f264c-bbd0-502e-bf74-e357ef30aa15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.2 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.2" } ] }