{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dc9aa613-ee7a-51eb-bc84-3721198e3fe9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-framework-bom", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1", "version": "6.2.5-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:821f8ad7-39ee-5585-9f24-e00081a04003", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9a301d6b-f31a-595f-a6ff-28545ef4873d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:654a51b3-1b24-5d93-8895-0577e0545855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5065311f-533f-57ca-8b29-a8c73d959730", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:10ea0082-f99a-523b-933a-44f5c53235d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d80d8f7f-920f-5b4a-be3a-f88990a9531b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:143ff882-fac5-5ce6-9918-6a4cfd3f3fba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:24f12a5a-152e-5ec5-9677-7f9ed7d2af77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:65d5b62c-51ea-5e16-9f03-38545b429b77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f713192a-9a05-5c44-9a8a-6fd4dbcbd8df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:235f2620-de31-5a17-8387-2a8ed08e7ebf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c81fdf16-039a-5baf-b8f7-d443f15b4ef4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9a66b4b6-7305-5a7b-b467-ac34701b8279", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:300362c1-c0d5-5e57-9435-c99f4bb3de98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b88a80ee-b311-5b93-ba03-79f071a10f66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e1184942-7e29-53dd-9a8d-b26de390e922", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:6b505f79-5e70-5616-91e7-ed513319cdb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:3d4b5933-f6dc-5ed4-b0fa-a3336185338e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:62bb031a-4dbb-5d10-a761-34baff2196da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:596a32a6-8740-5eb2-ace2-fdd3c42c0013", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:33f09f02-dba4-5d5b-8d94-49c278d887ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:04c7560a-084f-5057-8965-4aaccadd6516", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ee18611e-094f-5d3a-9630-c9f14ba7eafa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a6a7b4f0-5699-5716-a8ad-79d9ca0a19e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:77269f18-b5b4-5135-8548-686590243a5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:1fc250f8-dff0-53b3-aee1-bd5e97948672", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7c8af89c-f825-57a7-b916-d2381129d541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f4f0c41d-96c6-5a51-b117-74244cb43e67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ee30b014-1ec4-5d7a-af20-a7d3ecf98ad0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:453476fd-bdb0-57d1-8527-d8a796b667ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:0e902d8d-1117-5628-a56b-1f501d30c923", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ae665586-1f6a-594d-a357-c23976c48821", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:72edf3cd-825f-5183-a510-379c6f59701f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9f670678-3234-5c71-a19f-696fdb9bd70a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:3dcf0633-e0b7-544a-8a37-3baf146a833c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:610c6f49-0665-52cc-ad00-f36db1d26ac1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:670205f6-df8c-5a6b-8304-c355091a389e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:6a400fc1-0e58-59f9-a889-f567f9f36108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d01e0668-7684-56eb-bf3a-43b7a82a6ac5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9c8edcc5-bc6a-51d2-9826-3cf088f4b989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f7ec88f3-37d7-5bb7-aea7-d2474486aa2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:72ad1faf-33f3-5f24-a03e-242a3239bb8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:0fc5432f-ccaa-546d-b4ca-08388e6e131e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-framework-bom." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.2.5-tuxcare.1" } ] }