{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2cd71720-1ae6-5bdb-86a0-cf8953cf1240",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6",
      "version": "6.1.7-tuxcare.6",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:15dc77c6-8d59-511c-adfa-8e7252c8347f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5c170d0f-4cc3-571f-86e4-1b159c65c2ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:500cb5d4-af5a-50aa-b130-ed0bc33e3349",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b1ef7632-e8f4-5be7-81a9-80b207ba90c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2d08c031-f7d7-5e35-a615-c336cc7b7666",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:59b83683-a925-5e8a-a39b-5f0e9cc9e8c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a3691821-d86f-5740-a782-bc103cbdfa22",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:65190418-ad44-5e96-8930-d3465d013ca2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:41445de2-731c-500b-979c-55ba4320fb2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:89b62284-d169-55c6-a545-b018927c073f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:58c4b091-6ae6-5050-94c5-1eee92dddcf1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f66d9133-ea74-53a7-937d-40652f63b98e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f646f72f-7910-5d90-8cca-bf1d2963cf5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d8fe8c34-b1d7-5bd9-8152-9c122f097bb1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:15dc379a-ba37-5624-88a0-2942721ad59b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e1cfccf3-7db4-5129-991a-ea186bfc93c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:17be2f28-d880-5e0e-9055-98a69b32cf3e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0a8d4740-01ae-516a-b92b-d63f21b8bc48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e8906865-5909-5a87-abb3-22f0ec18268d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:3cabc73a-6197-5bf3-b6f7-5d48c4591a13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d797333c-c219-5d2d-9985-8d350d1cee79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e7004040-6950-5001-bbc6-c324842560b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a628234e-222e-5bd2-ab34-dca2694a64aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5317f3f2-2a62-516e-989f-496082723532",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c894b45a-cb52-5036-bbab-03e4b9b4cc91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4934a88c-5783-58e9-9c71-f6503d37fef2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:8a6a0c1e-2694-5381-b2fd-094e025c0449",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:290b496c-4c7b-5170-b45c-2cccdfd5da09",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f43b905e-9a65-5c8b-b82a-b76aae5b1bac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:99afaafd-c912-50b7-9203-8fde4c735795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e217d340-6f4a-579f-b59a-bf92282ff146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ba99b52e-a375-534d-a0b6-d42504ecb2c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d4b20311-4263-57d4-b030-b9ed8bf80027",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:517e8111-3280-5347-850d-afc1f56daf71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fa701c38-5911-5363-aadd-52997c9be038",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7fa8aa3e-d5ce-5cad-b8f9-44bc5c1ecb46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a76f3fdd-7ba7-5fe9-ab2b-23ebf77e7040",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4b3543a6-9667-520a-aadc-52165b2fe615",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:004d2077-90a5-5dda-b317-97bf2e2536e4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d3c8f0a8-e0f8-57b7-a6d6-e8f22670decf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2130f757-aa9e-5272-8432-a79d23d14a4e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:038eedcc-bb5c-5b51-98a1-3a8ec2468c29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d5bd044a-792a-5277-84f1-e7af9f9b9860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9641ecca-0349-5c1a-b4f9-bbf34025ca63",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.1.7-tuxcare.6"
    }
  ]
}