{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b5a94b60-fc53-5dfe-90ce-cee1b704dfbe", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5", "version": "6.0.11-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:8f9486be-4b34-56ec-afab-db0280deaefe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:f4549924-b2f8-5036-a8f1-37e8a343d269", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:abde2b55-d6dc-5e42-8c90-7cd9c7646284", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:c8714aec-e6fa-5dbe-aef0-83555445cbb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:2880bb07-ab70-53f0-b8dd-50d839850456", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:3e03ad2c-3ed1-550d-9025-1285dbd23f30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:67831d34-fcff-577c-944b-92e35b7a03c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:07c7fa8e-93c4-533b-b568-84520adc95fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:125fae13-e507-52e5-975c-4d967748f0d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:c93bb7f0-c4ab-5c58-9dd7-5f47b263f20b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:e4808787-a89d-5090-8ebe-483d6095e535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:97693c7d-a462-563a-93c1-45dbf91741cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:16415ef1-a6bc-5db3-85db-ae40e7dad3d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:9f71f425-b039-532d-b997-52329d38ed93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:2915c6ff-d372-5142-97d0-07c7cb313c0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:6157a6c8-a5d2-5000-b137-9754bbd03b77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:9e2468d1-ccf8-5b8d-a3e9-f61d33eb0218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:1dc6e212-690b-57a4-b3af-79529d9c04c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:2251f25e-ee88-550d-8cf6-0a9098ed82f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:62c75333-b5ed-5918-9576-a9c478180fb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:9fa7924d-367d-5b75-be91-ce4c14ffcde2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:73d80e7d-c1e9-5144-bacd-f20af4b3aea8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:035cd411-f8f4-5cce-bc80-98a32ef91429", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:c3129109-3aba-5164-9b16-4258e47dc2a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:9562d542-ad27-5307-beb3-4a0cbb2ee84f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:7f63846c-3e7f-5c2d-b626-040c0b6a4d69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:258664b9-43c1-5d11-a868-498f8ec20f86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:95077927-19b3-58b8-91fd-e78243e854a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:cfe3bfe1-9e70-556d-8f1a-11174903e9de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:b5ec2232-1538-5da8-841e-15365243f972", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:c638c1c7-8276-5889-916f-64f430884c57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:90aa0e24-2eb9-5ef3-97d4-4b2d5517a0f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:15433a0d-8e6d-5f43-9165-e4cf05d114ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:e5554a41-2fa8-5179-84ad-166e2beaa20f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:769e6d73-b38b-5c6d-a724-bebe9d4edf0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:0d7bdd4e-52d8-5d97-b7de-6ea8efd7b765", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:4dba584f-ded4-5cc4-ae9e-374bb44aff4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:2e3d80ce-fecd-5860-b5b4-41faf764f5e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:f0859fa8-828d-5a69-8aee-f719a2ad3424", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:bd4e3b52-cef2-5136-947e-5c6b253d757a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:47ac079d-af59-54ec-a218-5c8cd3543741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:3b952da7-9331-5691-92b4-009a7a18f0b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:78280df6-a9b5-5c51-8987-4752a2c5457f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:482e330a-cad2-54ed-8bb1-867c74f66e85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:9fc99eb4-5785-5cb3-9863-71de4e49df8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:e988c5b5-c19c-551a-8ef6-bb0a343ea850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ], "bom-ref": "urn:uuid:3e996c12-bea5-53c1-a8c7-bcbcc89c13d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.11-tuxcare.5" } ] }