{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1eaf54e6-c4ff-5d4b-8b62-b956e7273fb7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5", "version": "6.0.13-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:ff152bac-2ce2-5899-b83c-b8934528bd24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:06d61d82-d22c-5f37-802b-7e348ae00e9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:0d017d29-74db-5fb3-a7fe-4638b79768e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:ca9048c3-b0ba-5b3a-a525-5cd398da0852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:75630153-39ba-5398-a2a8-1042b86dc7b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:cb978086-eeb2-58a5-8b64-4e9bee4430b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:e00ae07a-d6c5-5bc7-8366-040b7de551f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:93b241a7-4004-58b2-a4cf-35c9189239f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:5f11b9ec-a80e-5e64-92dd-537f3659f7f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:07933ed0-c3fd-5ec8-b072-a3804cd4a4dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:00c211b9-91e3-56a3-a5a3-59aa41623a80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:a83f3466-9785-5404-a53f-99772ac205b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:800b1be6-7f1f-5688-8286-f4cd69d653f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:6941d8e0-07fd-53b1-95cb-1e8356ca57ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:d59f36ab-d9f4-54ae-bc4f-a8537a9829a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:9bec5a23-8a00-5497-ab76-921301fa4ba6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:32cdcae5-4697-538e-b534-081b0e5ebe95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:e3695f9d-f47b-5b4b-a367-e955a9e780fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:9955fa75-263d-59cb-8f9c-3a7c14528cf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:f5f3c84f-8aa8-508c-8fd9-55cafccfa2d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:8bb712fe-c065-5211-82a1-7077f266ae53", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:85814e3b-face-535a-b8d4-f7f04ccfcee9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:1b17dac6-c8a3-51b6-9a1e-3f8ecd3099de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:2b902be1-d8e4-5606-9817-dbdff6336cbf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:e5240308-e49e-5214-b243-813b48d68d93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:2ab08887-5574-5b91-92b2-6b3cc7b65ad5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:88bb4b3e-cbde-58f7-aff0-4d4ae0f7041c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:54ccdee6-d4c2-5421-b018-b9f152b775f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:74855934-2960-5abb-bd5b-f2e02dd8cdfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:f7cc3045-0b4a-513f-b217-8c901e6b1399", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:f8f1809a-39d5-537c-a8d7-d928eac1435f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:19725780-ae15-5fc3-b9c5-4083dfa1a7ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:337d0bfb-ebda-54b3-8d4d-adddcdcb5f8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:695d4cde-6326-5e35-95c5-91b351830d5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:b153d01a-6670-53fa-aef3-82d6d4dd8892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:57923736-a9a1-52fb-b414-ddb170dfc159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:fc1a7426-d105-51f0-90fd-61f941e7d176", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:9dec62b3-281c-56b1-b5f6-4c119c5bd085", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:659f517c-cbf0-5371-b95f-c1a538b6c581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:4c2eff44-4f64-59c2-a44d-091df7647698", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:8eff4618-295c-5ea2-816e-07b25932b90a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:5962421b-a397-563a-bb25-c29a7c9a4a07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:364ffe7d-d97d-5015-bd98-655c1c792b93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:0a580ef3-da55-5e9a-8088-66030a140ebf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:8226b445-71b0-5372-b8f4-57a56f57621b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:89ef18ca-8a36-5e43-bcd5-ee63228f9dbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ], "bom-ref": "urn:uuid:e239e6bf-dda1-5008-9f06-b926ecf5ccb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.5 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.5" } ] }