{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:77c6fb51-9c99-5006-a640-5da74df87432", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6", "version": "6.1.4-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:beae136d-84fb-510d-92b5-6b10b5613f9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:169b0464-3ceb-52a0-a9dc-e7e18778d2e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3496df6a-9488-5cac-8edd-2df5ba52b702", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fc0381a6-9645-50dc-8137-6b2b9158d8e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:4cd5761f-1d14-56b8-9357-b14c06d0672b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:14eea011-e448-51af-bda5-5d12765ad34d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f9a55932-1a99-5336-8cab-dfaca50eeeeb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:299c59dc-4bcd-5c1a-be5b-577bb6cfa37a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f5d0abfc-a96b-56ea-bd27-c4666e5ba7a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ef31ff90-3743-58db-b2e0-bf21c2ab69a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6bab6654-4a2e-5374-8cf0-49ff14daebae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fb21302c-b598-510b-9d8a-98fb0990f2ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ed4d13cf-7973-5289-ac98-62ae4a8dbb64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d52fea79-3be9-5691-91f7-b7185bac4473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:8807abed-453d-5de6-89e8-9d22802b5818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a0a33c67-3d44-5380-85b3-d876bbd34b9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:8afae88e-0a40-59d9-918e-b46b65cb1a65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e31cf3f8-0431-5b1d-bcd4-b89b63cc1d67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5c3aeee6-96c6-5c00-a12d-ee74bcf6b2f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ff63efbb-3578-5d5a-93c5-78eba33f2437", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:195337c2-f332-548f-8f77-8615a7f3aa4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6ce490f5-4a4d-527d-822e-5d5c8c2cff24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ce32d067-4175-5745-9190-06d6c92913b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:dfce3690-3345-5df0-ad9b-a5ee13fa68cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e0d0e0af-26a1-5c9e-a592-ec407947da37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:646ebd4d-9b49-50c8-b2ea-7f953950b753", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:28e48bc4-9714-585c-ac62-5ad6250968a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1069cb02-125f-59e6-9392-bfd79d1e7f86", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:4adadc97-a047-5edc-9c7f-002f9e6ae155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0126c56b-677e-5705-9fce-72fec69a0434", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:589f0c5f-95f2-53f5-a999-3d037d044283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:71eb64ed-7281-53a7-94ac-d523abf78a97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0111551e-3c63-59dc-a6e9-bcb019acad7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:70474071-5823-575b-af7a-5c287b68c31d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a0dda6c5-78ae-58b1-a0f3-d363b7d0493d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:bfa7ea63-6145-5756-b381-6420bba3aceb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:61cfba32-459a-5dd9-a997-2a98fa3a6470", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:108da6db-edb7-5845-a788-e0bdad77841d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:18873aec-d624-5c88-9bab-28be9bd28430", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b00fa4c8-e595-5474-8176-e93df100c4f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:194cae71-ff90-5198-b50f-2c818f67c9c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a07ea4b2-ca39-532f-90b9-fe949efe0c98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:527d8a8f-21cf-54a2-b421-0d96c9bc8a3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:05c7d239-839f-5391-971f-7ec544682aa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6ab6b111-9784-51b3-92c6-8c25fe1079a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9e36921e-3457-5f44-b307-7dd3aa136117", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.4-tuxcare.6" } ] }