{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2f33e489-9015-5b8b-a1ff-0a88179fa87a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-web",
      "purl": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1",
      "version": "6.2.3-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d50d5c90-aa03-5be9-9ea1-6a169d50355e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:687b1ea1-d133-51d0-9a46-7f677525100a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a9af9857-419f-586a-9d46-f4ff737f03f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:76c55b47-3517-5bbc-9927-ceb6481ba935",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b23b9ccb-90af-5bb1-bd0d-76d3fc499883",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:28bc41ba-255c-5822-b29d-08dd48057185",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8292fb9-de2e-5975-a080-da8e5f2b627d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b80590e6-9944-5061-b515-55cb75775602",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d4f0d4cb-2ed2-54ae-b187-1078f98ee5e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f8770c77-70fb-5c4f-bd5d-c4634456d822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9341568c-cc1d-5c2f-8152-d51f5b695ead",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9aefa74a-2e8b-589d-8078-97fcab0b28d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1728327d-627b-589a-ab0f-730c4ce9ef08",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:df5d4726-91c2-58b0-a303-7617aa745ffe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac611792-ead7-5e17-b84b-1753f5995c00",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8a0bec0f-e07e-5d33-9f41-1220c227d27a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6aed576e-fd98-5622-9cad-2c59bdde32b5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2d9b7892-f02a-5afa-b81e-a0c2b31a6dcd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:161031cc-e834-5909-840a-794f718def62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:431cb9df-14e9-5924-a25e-710453d61cc6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:601ead33-2c63-5645-9301-61e968c49750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f2e52f63-f2ed-5d5a-b714-36f517d10e87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e012d3b4-24ef-5028-ae6d-47154625ed5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7e101ef7-9ef5-553b-aac4-9f41e08dd152",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7c4252ce-0a11-5008-a8d9-23797eb5eb1a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78434ad0-fb80-5329-8000-6e3db5876a0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0baa706-813b-5a3f-832c-60a7f0842480",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b16b9f5a-1c03-59ae-bc44-1ae379d0d069",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d3f3d641-f39a-5883-927e-43a781dd9849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:117eaff7-3df1-558f-a437-161a0b6c7869",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a068dede-5400-5af9-9bc5-23c7e1515469",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ee3c3478-2c51-5bea-8893-ce93653f1af6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3cc8e7f1-ae8c-5590-a9bd-9dc1a64f279b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e9c06862-1142-52f0-a260-2c9d12903860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:615cee57-aaad-5cae-b503-b2ad32f617f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c4e8d57-e934-5a9c-ac47-c6f542a95e67",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:db60244f-2838-517a-b2f7-6b07fc067e9b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:33ced42b-d097-578a-8395-bdf6d8de13a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d84421fc-7d6b-50e0-a0f2-ae601dcb3e62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b54854c3-212f-5ea5-9888-c885b66e3f69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05cbed62-7df9-596c-8a4a-942aab53bd34",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:57bab9b2-b8ec-54c1-bf40-2a1def16ad10",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2466a51a-067f-5272-8891-b172e8aab6f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-web."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-web@6.2.3-tuxcare.1"
    }
  ]
}