{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1ff0a50c-2177-5f4b-bdae-9afa48691e84",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-instrument",
      "purl": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1",
      "version": "6.1.18-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:54d7b78a-3ff1-50b9-a37c-de9e854ca155",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9306e534-d8c5-5f57-a74f-047136ec303c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83484e95-cf63-5313-b57d-421ac16b6dde",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aff13b40-11c3-551f-95ec-2ed9a1d71b6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1b7b1b9b-e4b0-5a66-a728-03964e78617c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2846d7c2-f7c9-5eb8-81ab-ce3f5a1cdc96",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e78ce91b-85ab-5a24-b8a7-fe18dae62e17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:27b89ba7-be5b-56e4-9b74-eac283b68c66",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:478b7d9e-ab63-5b53-a799-aa61eac78cef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b6150b7e-9a1e-5d20-b3ac-7dd6b54d1b08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:304f644d-fdfa-57ea-84b2-9e85420bbacc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7667edf6-58d9-5bdf-afc4-433d37d8febc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b3d6b0bf-148c-58cc-b7e2-6d0cf6d1e0a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab679234-fb78-5ee6-95bb-8128567e64f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f8109b95-2acd-50f7-8468-683ef25df51d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d2b0fc40-e5d9-5195-9794-4e1839ca2dfe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fcab19c9-e6db-5344-bf22-b306de4d97a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ee9835fc-6558-58e9-b5f0-4cc2e9720d2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:25f8ac51-7b1f-59d8-8298-2051fd7fc8fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7118ba21-e5fa-5906-a524-e94efb77262f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b4b1c1cb-5fec-53d2-9a34-9c6e2377f761",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:139e7f54-14ac-52d3-b0ea-d4506700c742",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:872cd117-5586-59f1-8ff3-ca39ef7e11e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:90f5760d-f268-54d8-af0c-39ff695e1c79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a909fc27-9d44-5732-b740-4e89d6020368",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0245fc08-9fe6-51aa-8e33-06fe60c9f306",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f4f0e581-993b-557c-a200-4d633a53f675",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:53495d04-2f3e-52e7-a1ed-7fc0672e683c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05cc9b81-d97e-525a-94d3-9a1b717828a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6111ad22-ef8c-587e-b5d1-4ce0106a4f6f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c7969cc9-b898-5fae-8582-07ea9ce2610e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d7cb838c-478a-53a4-a079-41edddf39d11",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8028cb2a-afee-5486-91ad-cd9e2f164612",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1fe5b3e0-2cf3-5d6f-9612-65218fca319b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:35804df4-6147-5948-a5b1-5d70b6381408",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8a9d6170-381d-585d-adfe-3364e913f693",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c68c316e-d478-50bc-bfce-ad82ef599cf1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:699e9516-3d84-59b2-80bd-0cf99ae9a528",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dd48539c-2bb1-56a5-8c6e-2d3860f63a5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dd2df7f2-3789-5980-afbd-596b6efd7740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-instrument."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-instrument@6.1.18-tuxcare.1"
    }
  ]
}