{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:52e86317-642e-562e-9363-ec51489a51c7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-framework-bom", "version": "6.0.13-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:da90e69f-f476-5d77-a82c-7f48aad1fd03", "id": "CVE-2023-34053", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:104fc185-e5b0-54e2-a7bc-622f09ea6a57", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:98082738-15e8-5ed6-a50b-a1a05b0b7cb7", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:685a94a8-5c99-59bd-903a-00f7bdaec54b", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f25869c6-07c6-5882-904e-329f5680a30f", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bfc1795-5df6-55dc-b169-f70637158b70", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5d27026e-61e5-55a6-963a-33b958f2cf5a", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8fc98142-cc7b-59a7-bd09-322a29f417bc", "id": "CVE-2024-38820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b578f5ad-68cc-5c29-a28e-d4cabc0f607b", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9007cdf1-fa52-5f4c-8126-5e139292362c", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7d7b71a2-4ba5-51a4-a32f-e3331f549d6a", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f40773d9-af0c-560a-b971-80c8e50354ad", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:677bbac3-f175-572c-acb5-a8b1f2b2bd63", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9117c2ae-b9d7-5b34-8313-a840d8e3efb6", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:795c45da-810e-5d55-8bca-2aa8aae37de3", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c1e99cac-c65f-5fa5-811d-827339beb22f", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:18d5bced-8d83-5352-a718-0aabf7679af8", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:245c3b40-82a0-5d92-a42f-4b5eef82a36f", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b138a3f9-698e-565f-88fd-867e21cfe956", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:206a3cc4-f6be-5dfa-9f0d-da0db7605a43", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d98b0b0c-c1e3-5983-93e3-687ed0a552b3", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:040bf7a5-3704-5471-a1cb-e64cc5f255d8", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aae7edce-32e7-537e-912b-186869f12c1a", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:363cc08b-945b-5a02-bbe5-23f194c79701", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:922187b9-dae0-594b-8138-df6746d5707c", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a10e4ec7-5849-5770-ac3c-47d8699bc626", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:80fc3cac-3e7c-5bb9-aa18-f1aca36d3640", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3fb65b54-135e-5049-8471-a18b7caf2579", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d725f84a-bd3c-517d-adac-b70a22892536", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d07c8e5-18b8-5963-a9a2-53df8f30b144", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0d15050-091b-5d7a-b7eb-7246d8cbacea", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:587daccc-9c61-55b2-9a2b-2f7d4de07307", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c32fe22c-7228-54de-ae9b-fb0f187c369b", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:49d64245-622b-50ab-b66a-4df14e3cc58e", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c525db9d-faf1-5268-8e59-f0485bd7b98c", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:81d614af-8825-57c4-883f-5bc919aba71b", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2d84ec7f-e36b-5dfc-a810-fd934c333bb1", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:84bc8abf-b899-50e9-8e66-72e104a4dd1b", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e47c1933-7607-58e3-a8a8-757ba27f9d38", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28612062-655b-517a-abb2-e9aa687fb081", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7a595698-651f-5214-9682-f5e5414e96b8", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b7519e4c-6b7c-57a0-ba78-60e72f02b7c3", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f7575dcb-2bd9-5b91-896b-84ab80eef54c", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:130b8d4b-45fb-5050-8bf9-64c87fe17ae2", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5e33573a-086b-529c-acdc-5c4d014c48f0", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:21f5d168-7ae2-5bfe-9ab4-2f03672de64c", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3b100504-e38a-501a-addd-196b2165f3a2", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-framework-bom." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-framework-bom@6.0.13-tuxcare.1" } ] }