{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b2d9fe98-022d-53c9-b809-e675a344df03",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6",
      "version": "6.1.16-tuxcare.6",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f307038f-a69e-54aa-8761-0dadc2bf0297",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:28da7a48-b85c-5214-918f-5b8e0d64354d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:95a16c83-0a2e-5ea9-8a41-016b3b077ed0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:df0dc5ef-6cb7-55c4-b1f5-d2802c3ed4a1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1b105a44-47cd-5712-8e5e-6703b8296b7c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5754526e-6345-59fd-b456-8d94332c6840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5bdce399-7a54-5a28-995d-4dd8f7208de5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c4bbce62-c080-5aab-90ac-cf04a61ee3b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:525bc945-e045-5d15-8ea6-671e70f1ba79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:08a6d219-9eb2-59ea-8d0d-03feed458268",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d1d8821b-baaf-5fda-b5d4-f4f0e46541cc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:17ab9039-f8bb-5c5c-bda6-b6379be58535",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fa8ccc52-4d45-5837-abc9-ca278e4b81cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e4f38480-a40d-506b-880d-c76378c8e1ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:04cdae3d-7098-5354-90f0-127485a3dd2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a753ab2e-5f31-5e8f-8907-301b8641b57d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2d3e8b9c-adde-5793-acf2-c89eaa87bb06",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0b1767d5-7c1b-514b-9109-14eb05a71e7d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1f19c7cc-1e9f-5ad2-bc63-a5df8911dfee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c2055696-ee76-5ffe-8282-3bfb1a63b75d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:aeb9dbc3-8117-5f07-95fd-9fd91b1cd78e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4852e8a1-4f02-5e4c-a217-137366272cd5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:54ef26fe-e722-5323-abcc-b46a5255efb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:428500ae-c03b-5ab6-b812-a4ec72e5ae6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:166ae4a6-44eb-5f30-bde5-c5976a2b4c45",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9dfe27d9-d907-5615-8f34-17f0838b904d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fe68c4fe-462b-5c01-85da-451b84f15341",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0a287cbf-e775-5f59-8705-7b5c05147892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6db6821b-6743-5bf9-9bb8-ec392d227144",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:296ab4b7-c313-50aa-9806-c27c9e18b0c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f56cb014-2488-50db-86cb-9b51c130d203",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2c23f9e5-d379-5072-87db-acf5765b2df3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cf5f2102-4e62-58b5-b5d1-e3fc8aad9b5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:68537a23-4b09-5c45-8a29-7acb1a55c8fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c322d53e-2750-50d5-ab8e-6bf6f0d9f962",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:624993f8-3633-5e30-b522-135569b1fd75",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:255da72e-a7a5-5040-82cd-456c7ea23fe5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6e15255c-4dfe-53f1-98c0-6638b1ec3d05",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c2cd556f-4da6-54f3-b925-fe78634435d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4e8898eb-916f-538d-b697-adc21df96cc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.16-tuxcare.6"
    }
  ]
}