{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7199b2b4-5ae5-5721-945a-294d80c602bd",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1",
      "version": "6.1.18-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f50275f9-da4e-570f-8cf1-6714035c5aba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:95e22900-f1a1-5ad3-86d2-4ac75e99525a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5baf765-f606-5ee2-b0c6-479ec0b3ba69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5d3c9172-99cb-576a-8673-5042bdd2e530",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8a08c93f-5107-5abc-81d6-fb6b5505639d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3b259293-907e-55af-8406-88b97c86c14a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:760b3e18-ae39-55c1-85fd-9551a91fbe33",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f765cf71-a797-5a9e-aec5-08f6127d4985",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3867afaa-2ed7-5a82-8823-4486737f121d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9b41f43e-3842-5a8e-a396-07d4550cd465",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:21f5f0c1-8dce-5873-a496-fdbb8a1fcab3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e3c9de9a-496b-5511-aae8-b498238a4dd7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:27e1b4f7-b075-5dbe-afc9-41cbb545d04a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f8022f1a-2a81-5737-9447-44d520bef4dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8502b5f5-004d-55f1-94ab-ffcabde8be44",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6943ad7e-71eb-53ef-9e6d-fe91055fea2e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:20a9c208-4e3c-521d-8783-e01136332bd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed0f4a01-8398-59db-8eb2-7b98cea36851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83be4870-59bd-5c8d-93f8-29ebeb99f9b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:61fe61cf-fddf-548f-8a1f-f572136bba65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d77123eb-c9c8-5c64-a92d-b19835499ca2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ff70fd38-a8dd-5aa9-8b29-153eb607818e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4184e44c-c4a5-5720-8a82-d921b80d5f79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bda9adc7-1b1e-5c6c-a20c-8ffb8f5949ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c4f387b-256a-5bf3-8292-e8a06d5b2886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:35504959-d1c5-5f97-8261-17fdb88b6ff0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aae5abbd-3b2b-5634-9b6a-d7e09c89bd02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:252a78cf-e5f7-5cb3-9ffd-241bbe4aefa5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c28c4ffb-d25c-59bf-955c-4026f28d89e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d07b07c7-7376-53e4-9c22-6bdb038dc375",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e6efa9fa-b2db-5480-8648-5fb867b4b380",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:626fd535-0ddd-5d37-b719-803c9ce61a52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f070e470-e934-5e55-907a-f687d77f012f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6de74af9-4b12-5817-87db-1d24af0a5028",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3ee862c1-365b-5676-a75d-02157711264a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b78346bf-3e12-5a7e-9d4f-d2394d1a61fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05999c08-7124-5533-9ede-82add0a9c179",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c1f4d03a-9856-5235-88c9-8f50803253d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b021625f-37ca-5044-996d-84698bfbb9ad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e49dab26-cdf1-5acc-bd59-55677b6e1655",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.18-tuxcare.1"
    }
  ]
}