{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:aa8399a7-58fd-53a6-bf26-6ad79a2c4f0b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6", "version": "6.1.7-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:75472fc6-0ffd-562f-a352-08b75fea02f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:8db3c71f-82d9-5c5f-81f0-2314fbbece6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:ec256511-1173-56ef-ae86-d920c84503e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:9760232f-ca0c-5e4e-94e6-fbbb2cbb9aab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a331f1c5-9f0e-56ad-b006-f9bf0622ad09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:822d8e43-f13f-5358-89bb-00252b664c5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:bde14d98-e4b4-57ad-b3d1-c87f287a7a7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:e92ea216-3978-55ea-b606-02f205804281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:4ebb474d-97b6-51af-9398-2975a7a9690f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:5bf7e79b-f69e-58a4-bac3-2fc7b2712cd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:1a0801b9-9059-5f36-b804-592164f5a84a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:7c8ab757-52c2-5f9f-84a1-75ca37d7bd3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:1efb0b69-50c0-527c-be0d-559593a3e59d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:95b47385-6c2f-539f-b4f4-f8a246c8ed6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:d98ec626-b2ea-5324-b15c-d0c36f0e8de0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:44d907f1-4b8e-54bf-ad18-6be4b96b49e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:fb602dc2-84ea-5c31-8d2f-9680970bd04a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:d6a09c54-1b92-51a2-93e7-af915c1ee41c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:764079bb-0737-52af-97e2-c72fdc643e71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:4ff0a650-0c43-5495-b5b6-0ea7f77cddaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a30704dd-451c-5be9-8e8c-462d49365495", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:2268b1f2-8e14-5141-9155-080c717f2872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:9c4bf575-bdba-5480-b42f-e36bacfbf09b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:dc8a2a84-daee-5536-b7a2-49987379f79f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:0d021908-d0c8-5081-b66e-61651313eb6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:81a12d8d-7125-5a01-8f58-52e19ccdcc7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:f64a7c00-096c-5245-8520-822a8fcf5221", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a6a62d6e-7e33-52a6-8931-cfe0898cb4cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:fd1faf05-9d8c-5edb-9052-09928cabd863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:e93bdf80-206c-526c-a1f6-71321c302abc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:77c305a3-3399-557f-a201-5cd6b08a68f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:4d86e19c-94a3-5d34-bfb1-c96e452b3476", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:b1dea3de-3fee-5538-b4d0-135bc1a8b1be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:3c12614a-ebbd-548a-9399-2ff4ccb91033", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:8b3d4b71-4c6b-556a-bc5e-8a2ad2fd54a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a6c6d724-a26d-5e27-b410-dee1bbe2e7d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:af63ac4f-974b-5cd7-b450-0fd4aeea5c68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:139e58c0-0ad3-54a7-b3ed-6810f27147bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:dea7c475-2212-5606-9bc5-7fb1d834cd5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:e3ea7f96-a67e-5d3c-b9c2-6e20dcb67cc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:222fa613-45bf-5c0f-9fcc-a24f9f40b810", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:0fbd3afd-b25c-576f-b845-c8d156e534f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:2d36d1c1-1937-5aba-a24c-6fa8314e3afa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:d7cb94fe-cae0-5dbb-8e58-300f0c87e1b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.1.7-tuxcare.6" } ] }