{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d8238804-9ae1-5143-8bbe-f240017c6cfa",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3",
      "version": "6.1.13-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:00bda7ee-1956-5054-9490-34b7828fab55",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:94859df8-b1ec-58be-a3df-f7579a01044f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:28214a57-d73d-59ef-a256-47357c3a71d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9c2262ae-b5d1-5d23-9fac-576136754ec4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:87a0c70d-3736-5852-bc38-d4e865cda58e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f10d1562-3a3a-5d26-9198-ae8bf98e2713",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9546bf4b-b3d5-51aa-a59c-93f6b605c37b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fd321e94-3a26-51e6-8fbf-ca6b42dfd3a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:179cea26-a34a-5051-8514-71c5dafd0e9e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0b8a51b0-155b-5f98-8675-86886cee7ffa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d9273a0-58df-57d6-8737-2f08f0be1deb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0bc7d62c-aecf-5525-87d9-548d55f20736",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:66e381cb-3558-5b28-9eca-ae0c6a81308e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6d988892-c583-5d75-ad4c-e804911f7924",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0d0ed05c-52e6-5ab1-83dd-caf753489aad",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0549e6cb-ffa2-5e0c-9cb9-a694ae11a5f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:808e4ee6-fece-58b7-b757-13eb3caba839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5c75d12a-14fa-556a-943e-009a7e9dc743",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:74f86b49-3446-5696-83bf-30118c7ba833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d5aaea1c-badf-5b33-97d3-b5e69fce0b08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f850d3bb-cbe6-5c83-bff4-409866093fa0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:430cca6f-f6f6-5ac1-a454-f6837199e8d5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b24ac6cc-a8d5-51e4-9bd7-fa5f4192d40f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c99b52ed-0bfb-5826-8940-b0973eb0562c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:70d7bde9-92b1-5236-aa84-c3f42fc579c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e8dac2e0-1749-5c31-b9de-d301c577849b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f8dce3ea-40b3-5382-88dd-d026e0af6176",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bd3f10c2-2d45-528c-950f-50899d20bca8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fd439e53-ba74-5896-93c6-b6bf2cc567bf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c7996c09-6351-5074-9720-4a1270b6ca72",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:603a8dc4-c1bb-51b5-a030-15eaff89176a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d071956f-ffde-52c9-91f7-d287c978c159",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f3976249-82fb-5eb5-acc7-c6b61e548ca6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:081a80ac-05e0-561a-bd65-b94141267f08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ca4e9c28-4d73-5cec-ac62-1196f43e0efc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d2fc82b9-2174-5197-86ae-5b44df35e1e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c47cd238-c4dd-5d1a-8181-8974848381cb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6643fb31-da8b-5bdf-99cb-ede999ead1d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5ff4267e-9320-5577-a134-12ddf59a60ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a3c28f41-0fc0-5312-aed9-5af15bd3dde5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:52ea9e7c-20c4-59a9-8151-6d4876df5df6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:37eb8dd0-487a-5e27-a680-b8977cd41c1d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.13-tuxcare.3"
    }
  ]
}