{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2e6154b5-5eea-5ee6-9adb-bd55069281a8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6",
      "version": "6.0.12-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@6.0.12",
            "type": "library",
            "group": "org.springframework",
            "version": "6.0.12"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:43e69744-508b-53f5-a752-ee8060168585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d862d4ae-cc89-54b0-80e9-49c02a9ba1a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6df9963a-98c0-533f-bfa5-90c0ff16d587",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:f7674faf-5d2f-565d-a365-222d91b4f966",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5b9705f6-f1fc-5cbe-b1bf-d3ea5635b56e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d2387f92-f469-54aa-b2fb-c683fbff1a97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9e250140-cfc6-56b1-88a3-c7bae601ae3f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:479bf62f-f040-5442-ba86-116728f5630a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b9b1c467-b4d3-565c-8fca-e7b8d02fb4b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:deb5f35c-aaf7-5a62-81a4-288422f8508d",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 6.0.12-tuxcare.6 of org.springframework:spring-test. not_affected \u2014 Spring Framework v6.0.12 is not affected by CVE-2018-1257. The vulnerability affected versions prior to 4.3.17 and 5.0.6, which lacked the ability to disable the SpEL-based selector feature in STOMP messaging. The fix (commit ff2228fdaf131d57b5c8c5918ee8d07c6dd9bbac, April 2018 by Rossen Stoyanchev) added a null check and the ability to set selectorHeaderName to null to disable selector parsing...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4cb40b89-2f3d-57c6-a049-d941b9df8182",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a7bc24aa-7b7c-501d-b36c-4a35d6a2e3e6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:82e7f003-9dde-576c-9961-5b582402d054",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9d62cfac-f635-5f8c-ad05-252177ea01c6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fc017731-3be1-57f2-a46c-eb12f7175481",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:69f373d5-a884-54a2-b12d-598ab593ff9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1f404822-217c-51c1-85a0-cd1cd181fd48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:0af13eae-1ad9-5c08-968f-dc76eb676731",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b0b8b62d-65a2-5e27-8fe8-5dc6cea1f5e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.12-tuxcare.6 of org.springframework:spring-test."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@6.0.12-tuxcare.6"
    }
  ]
}