{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a6cb3bb1-dfb5-5caa-9c8a-4d331af827bb", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-beans", "purl": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1", "version": "6.0.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5af28110-72ce-5a64-9666-fe69148ae798", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:60969002-51b8-5d5b-b7c3-b2386d400dae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:483d0acd-c546-5349-bddb-e5701bf909a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9c2d4104-b111-5063-80d8-88480ddb9248", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:cabf2a48-c026-5868-9a4a-04f06ab83cc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:583001b4-01b4-551c-9848-6ad35e2ee4b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:c4815f8c-5888-5718-9f0d-fcca0521a05d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:45a814de-68a8-5320-bcca-511dfc833b9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:11fa7713-6ad6-55d1-80f9-a05da5df0bc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:44b8d5ca-d022-539e-ba3f-431989031e07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:effb6d74-eb13-5d06-86d1-818ba45eaf20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:cc651adf-17fa-5896-a535-a3321f0ff582", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1ba4c32d-93e8-5129-b42c-cf2c59a589fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:75a6ae86-285b-5e09-bcaf-02b13a422666", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:85799e59-66fd-5fe5-81aa-067b6e983099", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d96cd227-4434-5f0b-a87c-75050913887b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:99def0d0-f2a3-5770-9fbb-d4c9134d9de7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7e6d1bda-c858-512d-a1ab-76ebe924d91a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f9cfae72-d27f-560a-9ce3-2ce1f755a754", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ac63a326-da27-521b-8bef-1c3a91983e26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f71e79e8-4258-5632-aca1-662a07a9110c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6adc9196-bfb0-5e41-828e-9c126ee9fe94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4531f329-5e27-5be8-98ac-e051e7629807", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:db60e263-e5da-5707-9c70-26261a2af661", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9365bd4d-6b44-5528-a0b2-9443ae8d511b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:04d2c045-ed6b-5870-946c-fd3c5c33a4c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f19ac6a4-efe9-5335-9873-56e4c52af75f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3218dc4c-2ba8-5f6a-b020-363e6f3e6a30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:7aed53aa-ad83-54bc-8588-47d62f891342", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b758a1df-dd6a-5bbb-be74-71ba891b827b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:eb549a4d-0c04-5dae-be7a-d1b15c8e86da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:66fbedbd-5425-5fc0-8272-12c42f8ff632", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e9699d13-ff4f-535f-8bcb-8e6b45e42240", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3ea75e98-be55-5c33-b4fe-944970e60c4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:91d08b86-b5ed-5ef3-a5e0-af45ff4f2086", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:39e8a069-fe29-5c67-91b3-68f6be474dcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:90ced5c6-bca7-51c5-bccc-0f51c82e132a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f5ad0cc2-726d-5e1a-ac2f-c4d82511b22c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5838e9c6-f11a-5e40-9397-51e3ba0349f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:53f610f3-d222-5928-a412-7d01dba93896", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ae60131a-38ab-57cb-9db8-d484a1d042d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8f370833-7af8-5cd9-b13d-e3b9aee80f45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e35cb511-d31c-5613-9a65-7d59990bb4b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a671fd4a-9d9d-58a2-a898-765f74f801b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:320c6aff-fc04-5a07-b258-79a26514c80f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1c8c8747-4cd8-5811-ab9d-02931a4b62f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-beans." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-beans@6.0.14-tuxcare.1" } ] }