{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:03a37884-5f33-51cb-9e78-2636adfed1b6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5", "version": "6.0.12-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:34d8af4b-b5ae-5fae-b97b-f01929d34840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:f0f4d4d6-668e-5c11-9daa-d35dce94167e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:2b30437d-9e27-513c-b25e-a3fed9e0b3d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:5777e49f-42a3-5f88-963a-b87b9329b3ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:41dc14ab-e203-5623-9bae-dd89e02dc3ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:1eb2df7a-ea2b-5c02-bc90-09d1167d4bbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:3659d30b-83ee-531a-bc09-363f753047d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:f845ab40-69b4-523a-b00c-039da4f49da1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:499a0ee3-5d74-51fa-a5ca-691de0cd4a63", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:d776fbaf-4190-5e40-92b6-769b14814256", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:56805ecd-60f5-52b0-9dcb-d581e997c0fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:869f27e1-0ff0-5032-b37a-8ae0cd8b17d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:eec2b039-4422-54f0-808a-d2416d16498e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:f2f73f7b-8c38-5b1f-9c9b-cb414703467c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:02b29050-6b09-519b-8de4-edcb28e448d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:0ae8346c-b19f-5e05-b613-03a618259b6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:da2c4b70-3d23-5f0a-a7bc-3e22dab49a59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:fe67b6ca-4e80-5648-86b0-073fcd88672a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:03ae570c-0808-5df9-9634-b7b3bd0d87d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:1ddc7e62-6c08-596a-980e-68d55ddaa265", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.5 of org.springframework:spring-web. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839", "justification": "code_not_present" } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:88590f25-8d10-5e24-b68e-cba09e4fa409", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:63e429c9-e947-5d8c-8e47-cf42e9076e1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:5bcd3326-247b-552e-b6e5-df956b34ddd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:d8c29e7e-745d-52fc-ade7-c37b5902f1e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:60f5d8a9-f0c7-58ee-bbee-422245fcff63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:3ceb3f63-a76d-5fd6-b9a2-7ba772840bce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:fd3bbbee-5f14-5ee8-9e7e-49dd527d4295", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:d987daa8-d03f-5ba0-b826-493bff9afccc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:a3418932-f70e-54bc-9d0a-af6f7304fe2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:cbbe6c7d-75ec-5600-b6d2-9b65768691ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:0aa7290d-a7f9-567e-956a-e089af3aac62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:ac8c3dc0-8607-58cf-8447-67174b1fbfd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:deea3713-758b-52cc-a581-393b012230a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:dc328864-ef90-54f3-8914-ea2eaff27539", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:e4e31dee-e667-54ed-93da-e4112671c7ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:80c7fde6-6a0f-5180-90b4-387a8e67ad4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:dbd314fd-fc64-5902-8794-7eabd13a014f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:400c0e46-35f6-506a-8a43-afd5b87a72bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:5e3bdc1b-c080-5eb3-8667-69f9e418f183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:a0ea68dc-4204-5fba-8177-6ee3b51deca7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:fe46e2da-d223-5525-a04e-50bb50b7e341", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:3de2fc04-8019-5994-8328-7a8d89491e2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:84de0dc9-9596-5590-8814-8f113620cf41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:233fd91a-463b-5564-a68f-c57be6f0652b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:a2b4b28a-e970-59c4-9f2b-89f85c1530b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:b9ea5aa3-cb31-5a8c-9cb6-d6d80357befd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:9bd77510-0573-5bbe-9701-e968d30eef38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.12-tuxcare.5" } ] }