{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fa6f9dbf-594f-5052-8da1-d1e50e1f15f6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4",
      "version": "6.0.0-tuxcare.4",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a47029dc-3a84-528d-b56f-f1fb00e306a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c6164888-de79-5dd9-86f9-fc723c041232",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:73baeaf3-6bec-5500-8230-1237155f3f9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:244f5847-435c-54cc-9063-a8f8a81895e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9e2201e7-2b59-538a-8a98-7078ded901ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:46fdac12-8a95-5f16-b68e-a96a1c14df60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fbb2cf91-e2cd-5c9a-87ed-e9789828b599",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:21cc99cf-3df5-5403-9e97-8fbba50b3e99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:08b961b1-30ec-5678-ba60-99a06d3260ee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fa1851f0-5c6b-5a65-8f16-19b66f16a8b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a6705625-64ab-5629-bb34-8a25b5482365",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9eb72023-00ea-50a7-b9f3-64872267fb03",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b1a584cc-4e39-59a5-98df-452687cf8570",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:95aa6be0-cdbd-5864-aedd-13eae3b8da07",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a4de92fa-37db-5fb0-aae7-02bb45363e43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:37c0b984-787d-585c-a5ce-a4cdfe37f7a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:767d2256-e069-5c15-b7f6-1f060c942888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1109b339-616c-58f2-8ccc-956c93763489",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:43c01982-f62b-53da-bf4a-1118861d6bc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3a9b04ff-93cc-5c5d-b925-43f7732e5d2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0f8106b7-96d2-5af8-8275-b813a3d09200",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:65888552-fce3-5d3b-9b4d-d525765137fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:15ce040b-fa6f-5da1-9f52-22ec6792d617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:94ab6b0a-499c-5eb3-907e-73c7a9b6384e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b98fcd97-1de8-5c1b-9f82-64bb55df0d12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:abc3cfad-cf8b-51c4-842d-490f721969b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:97d6c265-3b3c-5f6c-a6bf-575d8116e89c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:60b05569-dc0c-5719-a80d-c02af52375b6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:47b75a9c-6f97-5093-b488-a7a1394e1eaa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:76a85611-1ad3-5175-8d10-8b49941cc96d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:efbbca27-f904-5cca-8198-6600a0a97152",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:18d1a8ed-63bb-5800-bfac-ca60e9c4c662",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:40bcea22-40cd-5225-8ee2-eed1b2efe2f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a42cb52b-bae6-5ac4-bf75-e7fc761af1f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ac2bbd45-6837-5eb5-be2e-bb33b0cd20b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:14b4d4c4-837d-5977-8203-448a79f7f55d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d7feeb93-1d3f-5adf-b36b-d5f8b822920e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cc097ad1-a608-5001-b8ad-557aef596477",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ffdc34a9-2c9e-5f89-a9e1-2319d0a7e45a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:06318a99-f80b-5292-a1cc-f14aeac97720",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7873b503-3d39-517b-87f9-64ffe6d41c23",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b80100d5-18f6-5f15-b3b3-755a2b623516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9e33034c-bacf-5195-9a77-45af03535408",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e2cf4fd4-e677-5e36-9379-514069401cb5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1cd6ed84-fb37-52c8-9ccf-c794d5820819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:077b6b1f-1c87-5a52-a965-ac9cf690eba6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c57da939-c492-5f33-99f3-1dbc372d5170",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:639dec1b-8dd4-5df8-8078-c7b13533b4db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.0-tuxcare.4"
    }
  ]
}