{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d4966c58-f1a2-5f87-8a54-3cc06029732a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-web", "purl": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13", "version": "6.1.21-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4fb9d616-7ce9-5adc-8a5a-ca440ea08005", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.13 of org.springframework:spring-web. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:2eb69820-05f5-5630-b825-552bfa4c8fe7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:bc1eae76-ddd6-5a96-a919-a36d9243efab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:885e9a1f-69bd-5e8a-a1c4-733d966f157e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:041327e2-0f99-5bf5-9fa1-644096b30e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:52eeae60-43ac-569a-ab60-d7a039a31b7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a1561d75-7d47-5636-87bd-82ceefe94fdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:249bd51d-9af7-5cbc-b9d6-cd3c5d437013", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6836cb4b-8f43-5ed3-8206-1071d412dfe2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:62426ea6-63a6-5662-959c-4ed2b6618c28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:331c56dd-b145-5090-9071-1f5afce23061", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:be0ac49f-c3cf-5bdd-aa35-b96a6966d218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:2b7e752e-29e2-52a6-ab98-ebbadc66fb78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9ec2ba37-f6e2-53bd-a3b5-289acdeb3183", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:cd4f593d-af9d-5e42-98bc-44ac794807fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f9e33c43-dca4-5c07-910d-48a751bdf623", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6bf3f031-77f0-54fb-8706-db2ecabae3f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e25720d7-d875-58d4-b543-1a837a00a2e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b0adcd34-2e62-5de9-8bff-867d9e88116a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6bff7ae8-b1fc-5fdc-80be-a01a973e5e60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:dc15f1d7-29b5-54fa-9e73-0e4e14934af2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b2594aae-a957-5088-a653-1a4bda7f28c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:35dc9172-a5f4-5c87-97ee-f1db77045240", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ac6ab9d4-4d2a-5c14-a9fd-321a60399def", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c5218c6d-4463-5978-bd59-807c369f7d70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:47f5458b-a77b-5464-8b24-523b5e695014", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:db43ffd8-b3e5-550c-a71c-20a034e8ac18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b305be0a-1369-5fca-8c05-d27f2aa6dfe6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1623dac4-52f8-56b6-b609-04b74577ad0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a34f2347-b97c-5c92-9ff8-b59645cfcfc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:73c3fd98-622e-5b36-99c7-7d63a2e58d5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1d35cca2-c505-5472-9c7a-bff692c382e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a2a637b2-cf30-59b8-aa51-09550e30ee58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9e782598-ad87-55a6-8861-72bfdc2699f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:05b1995d-5aac-545a-93c8-b16b7116fb95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e49ad79f-2096-569d-8b1f-5e6ce0142db7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:d3b7a7ad-110a-5a4f-b628-2a2a9c7fdcf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4727ed59-056f-5211-bfed-40f39cd09166", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ea85bd5d-4bc8-57ac-98c8-0525fcd34296", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-web." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-web@6.1.21-tuxcare.13" } ] }