{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:325ef6aa-aa80-532b-afe0-5988c799767b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1", "version": "6.2.5-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:90a170fd-10ae-5ef2-8484-28b36af8672e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b56d7c7f-e1eb-5ef3-957e-ce2e638f973e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:54f25a7d-6c3b-5d0a-9417-fd0673ea7568", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a5321ac0-9545-5510-99f9-c6fd3e60e355", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:35a4a10d-e6ae-541a-8a71-86c38d4d3a7c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:12de8c03-09b7-5505-a2c8-43b029a6dfc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:09b2a827-09c2-5b4b-bad0-f19520fee28f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:0015025e-e90f-5969-b2d6-1348d0934f52", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f252eed2-75ee-5b1e-aa46-6e328fdc0e1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ac7c7202-dc4a-52a7-8a12-02f8db621b16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5e0cf727-7ac6-541d-991a-bea40d0a3d83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:22026e96-fd38-5dac-a4bb-6436a5630edd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5f42e758-2cd5-5c75-baa3-49343af160c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:05816e2e-75a8-52cc-b6a3-b355cd7ae8f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2cd3f86a-4176-5707-a3ad-f78a5c810fa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b6708f04-8b53-58b5-b123-6213f3709fbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7bdaff44-b378-5e78-b03e-fa85e358bca3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d5cba9bc-f8d2-50d1-8a66-ec913ea9e839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f8132e7f-a751-54d9-80a1-816d32fb6699", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:994d88ab-8295-5d9c-aa2a-2087a6eba012", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:20f7a0df-9129-5245-b8d4-597156443c64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:4719847b-d38f-50f9-bac6-9891107c3d07", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:babde1ee-dc83-5c37-8820-8f95ed49167b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b4b1e51d-5544-54e2-aedf-8a3384176399", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:1d5c4a9d-864c-5277-8426-27112fe8017b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5719d4d3-1ff1-578d-aaa3-097f95e38847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b169e870-10d0-5ce2-b0b4-ee2d7502f14a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d291c521-7d6d-5f45-87b1-e393a68272a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:6391219a-ad60-59f7-a063-96593a827ccc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b0f5bc0f-49b1-5bc5-aa5d-6177556cb9d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:4d0b577e-2c96-53ba-b9ad-dd69250fab61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c2930b6b-aeb2-5fe7-9ca5-972dea6f5502", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:14758b73-148c-5bbc-aa28-390115f53e3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e597ce3d-83e7-5484-97ea-54e6f9921371", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b5e63a98-02e4-5973-aa5f-f34ab9519d07", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b46c9a58-23e6-5977-b31c-609576ea686c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ad2e8532-e2e4-576a-a2d2-e083d607c5d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:6026e7a9-1776-5d40-bfb4-a31ea7836feb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7445ed51-c2de-5d01-9032-0c9c3fcdc7ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:379d3b26-e423-53b0-ae0d-0cd88658080d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9687f80b-c359-5bda-be7c-02dcf315ec60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e559dd05-4893-5d3b-9661-c4ed4f67a619", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a4fe1d75-7be0-5a2a-88b5-044a85077a6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-instrument." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.2.5-tuxcare.1" } ] }