{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:86506db7-bee7-5e11-b451-26a78911c9c0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6", "version": "6.1.4-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a9489469-6b8d-5063-aad1-ba8b37e606bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:472ba6cd-f281-509b-8bc4-cc554eb3d4bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ef1a21a4-eca3-54d5-837d-2428f4f6b282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1cf2f2a0-5752-52dc-be67-3b21cf9a2af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3427e192-98a8-59f0-98be-de5c9befc5bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fb9c41d2-dce1-5499-825d-e51981d32da0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a8fbc371-f87c-5d19-98eb-e9116be721e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:70bdbab2-0003-50cf-834a-b09bd13f190d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:bf7c9506-c2b8-5d29-9611-0120e589ad3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ba05816a-5aa8-5673-876f-41af01890d33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:80614da8-f9cb-5549-bdf9-32c0dde7d428", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:44c2c0a7-202d-59c2-8729-5009c528d190", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:8db4ddb1-47d5-5005-9b58-22a0cab86547", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:8e282191-8f9d-592b-b958-6e51e5d52b49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5c920963-2409-500a-bdcf-077b5a8b1407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1b62ce7a-cb4c-5f48-913b-f30a538fd1ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:558fd242-0af0-542d-a8a4-34199116842f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5f8e44d7-5a42-5194-89d2-9c85c4ae3ff5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:dd2f18cc-ba30-5033-b47e-3f380967b83b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:345f1cc9-b16e-5548-a867-ab2717c620a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b855476d-ea08-54ec-a276-a89a2b0406d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:22aeeb39-238b-5080-9bbc-02f72ccf909c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:91b0174c-14d8-5f5c-8b62-0d5afdc2c25b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:25f12829-1e75-51c2-b7a9-fdaeee5aa120", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d7651804-8d20-5413-9e1f-4862253bc57c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:dd3567d8-cf05-50c1-b1a3-80654240e120", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:98dba1c0-0ada-52f4-83ec-37d2c3b62b20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:42829dc2-b790-5cdc-b17c-5d7fd694ea55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9cd177c8-26fa-5fb3-8ea4-9b640ddb2803", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:537b9c03-43fe-5260-bd1f-c334eef25600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3cec9cbe-a82d-570d-aea0-3716498bb3e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ab524acb-57f3-5a7b-a077-2248859220b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c01a7d0d-0250-5c94-8fbf-c927877de0f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:117d6c40-1158-5839-abba-7438cf0df1e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e4722c78-e180-5606-8777-062eb7dbb296", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:88311320-1340-5977-a654-bba041832c2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f3d03989-707f-5817-ac17-9f33840f970f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:801192bb-3b99-506e-98d4-0845c94db311", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:629149e9-df1f-5914-8658-0d046deb38a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3a519117-27b1-55ec-8bae-08a7b83ab698", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:2b0a2dd9-0533-5378-ae92-78fa1bf788d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b7673995-6def-5da5-926e-0be6d6515199", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6adf2b59-f6a6-56a2-adb5-e56d8561fe77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1622fee8-4989-5eed-ba7f-76ad49703da5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9d6df4ce-93bb-5212-858c-43690862a679", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3b8018c5-33d5-5bee-b734-d528d7e00ed8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.4-tuxcare.6" } ] }