{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:203af180-6e85-539d-861c-27b4a79c6261",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10",
      "version": "6.0.23-tuxcare.10",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fcb7d9b8-1007-55e4-8b59-66a79adf83bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a072ac6a-80d5-523e-98b5-7ce44d94f281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d9844901-fc7f-54e7-932a-8d6ffde95162",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:79c2a1b9-8690-59e5-afc9-b936365abc88",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4893e3a8-76d5-5a61-bb72-d0eb7aa819b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b4c8f889-8f68-50c4-a8e7-91e8c941a989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:c4d80f29-1c0d-53c8-9384-9711ee1feb81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a811ce61-bc12-549e-aa48-81d117541c4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b6567962-aaf6-55d3-afa4-986c980c5467",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fe803ffd-0136-5383-99c0-f71750335956",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:83696f7c-84e6-597f-866c-811cf338a9f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3e575d1d-50b5-58a4-b2af-06e0ebc2e17c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:164abdd3-8b50-5428-a18d-7633951eff43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2d7eb45c-37c1-5e61-8f22-a44106116060",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:f4db90cb-e4e8-5792-9388-306509504069",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4dcdcef3-b654-5206-8bed-87b2cd9d63a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6c5cd09f-75cc-5397-8464-54ca0160a88b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:3c3976d5-1bb9-552a-844c-16aed3617314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d87175ef-5d9a-5cb6-b951-824b7abbe54f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:bba37d81-e078-5975-bc1b-8f0aafc7098b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:640bfa39-9c0f-5fbe-98f9-57b8de43ce2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2ad5f1f6-52f8-5009-b776-bf0a129b494a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4350ae4b-41c8-52a4-9990-7cb2e85a3d15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ae630edb-058a-5b12-9324-e5832003eff0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5b5eff79-51bf-56f4-911e-d5dcbfc9f9fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:53de1ca1-54bf-5e71-9f43-fdd144b20cbd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b44b2018-d932-505f-af80-d4620ea59907",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:711d43f0-cc5e-574b-b352-942f9a1a7326",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:4ccd4ec4-2c6b-58bb-b862-76745adc4414",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:70747696-5644-50eb-a62d-e8caef6326f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:fa000ad2-d7de-5c2b-9287-74831748779e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:b09bcfd5-7ece-584b-aa75-b75c346b0103",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:58ecdfe9-7250-55d0-b1b4-33be21a22df3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:567a8057-bcbc-51ca-bc1c-6690814c8c5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ff3035b9-4017-5827-923c-ea8b9c527e4c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2b8c7e9e-30b9-5c69-aeb6-959a2632c8ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:6ed61fed-14ec-52a8-92b9-9d02ad49fd91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:8d805d40-f7c9-5a56-84ce-cb128b612ddf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5d0cc1f4-dd2a-5a4f-a5dd-7e6a08d48656",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:8d4c3810-d4c4-56ed-a31e-a802abe4e09c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:97a9815b-3a33-531a-a8f8-1dfb7036c019",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e14a6fcf-9425-5e01-b79e-ac7e1965740c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.10 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.0.23-tuxcare.10"
    }
  ]
}