{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b51a8a41-f241-54a3-8555-2e78f388080f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1", "version": "6.0.14-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:49ccbb8c-0b5f-535e-9068-4a34e1230a66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8a4d2c78-79eb-57f8-876e-77c63e1b7474", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b19dc2ef-d8e8-51b5-af44-a7a05a8cf81c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:53469f19-4686-5d39-89a1-3c55ca91dbfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:fe41fb9a-b838-5149-8053-ffc8e5840d8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:befc9435-8bf5-5251-b38e-75cfe27e5bf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4458cc56-bdae-5f1d-9922-9bf7a99d69db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:22dfa04f-2519-576c-a01d-5957ea9b3864", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4db03fd7-4276-563b-9c2b-e7c8bfcbd7a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:8f5ff9ce-2604-511c-8ee3-4e1f3c99f212", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:60524b54-417e-5d0b-bf78-8a946c0a80f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f36e3644-e778-54df-b68f-8a81eb467ede", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5465baaf-2c15-5a77-9834-46ee8091dc5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6b7459e6-8de3-5c5d-b69b-bcb6a98b40c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:997697ab-f71b-5b35-ac6c-6ffb2af5a81f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:90657472-1913-5f9a-9cbf-01c6d7b71a67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0a154eae-1421-5bec-ba56-8eec890cac78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1f728f30-651a-5598-8542-d6825765e709", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:98ab6910-c06b-5218-961a-f03f5d35a097", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:fac39c00-610b-534c-ba05-915b948edf6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ebe5d6da-dcfa-52bf-8a29-62195b4f26ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:b963c1f9-3a53-5c34-8838-589b67f594a7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:bfb55844-bb12-52a8-ac85-9f11855a017f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:e7d97e47-41c2-5f71-97a6-0458a52bf6a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d8e90a0c-ec1c-59fa-9fb5-7e495a619c23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6ce7c710-260a-55ba-95c7-d04d255ef6f3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:78a52171-04fa-533f-85f5-df04bf50c16c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5983ac14-bd99-5c09-9f6f-54552bfd069a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:ca5a514d-a5ff-5638-8e25-4a6e9c28411c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:cf94098e-ca70-523f-a953-1541cd677135", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:76b5d030-0b0c-5881-aac9-74aeed811e56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:77f261b6-1593-5613-b31d-1ce4b6b2c549", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:9726789f-be09-5876-add2-f55778bdb4f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:a1c3ad52-e9bd-54ee-a925-a346e01c8d9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:847ddb69-4579-53e7-a881-eabb1c4fdedd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d172ac68-bd77-58e0-9e9f-ee7af39e58c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:1a532ebc-3414-5650-88a0-9068aacf9ba2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:0c6170ac-7087-5d47-bcce-cdac60e78ccb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:3e9a8997-7c4b-5e16-b69a-998160b2bb72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:84b0913a-6af9-50c3-bc47-75180cdb4b21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:4561cb97-7328-5f4e-ab30-2fc262e69b76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:6acd6a4c-2e04-5604-92ef-e564b32c1355", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:f54a538b-fc04-5eb8-9a88-ed5f1108e0cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:5f07c957-005e-5b3b-82a4-bc1f53eb765b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:38f18fe3-7ac0-5b65-9210-09e16ea72000", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ], "bom-ref": "urn:uuid:d716d6d4-6ac0-5822-9102-55f15e161c0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.14-tuxcare.1 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.0.14-tuxcare.1" } ] }