{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1b0ae640-a50c-5de5-95af-7cb0207c9c46",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10",
      "version": "6.0.23-tuxcare.10",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@6.0.23",
            "type": "library",
            "group": "org.springframework",
            "version": "6.0.23"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d541316f-ca86-5eee-863e-81ad0cad00b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2931d8ea-0138-563d-9d3c-e299e4eb9afd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a1312b4c-8131-5730-afc6-f4249bda8b76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:15b20d5e-8aee-525a-a289-f50c0f2fe5bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:ba8f06cd-4bd0-542e-b9ec-eda48233784f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2a63eaf3-1fab-5d5b-b65a-82f68c4287f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:94eda652-4b08-5909-ba55-d2a8292455e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:a5aaa92b-3158-5c72-b007-21599da2670c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:5eb5f8bd-a839-5a17-82c5-dcbec86ec8d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:377c1472-0112-5291-bac6-64ddea0de032",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 6.0.23-tuxcare.10 of org.springframework:spring-test. not_affected \u2014 CVE-2018-1257 affects Spring Framework versions with unconditional STOMP selector header parsing vulnerable to ReDoS. The target (6.0.23) contains the upstream fix from commit ff2228fdaf by rstoyanchev@pivotal.io that adds the ability to disable selector parsing via setSelectorHeaderName(null) and guards parsing with a null check. This fix was already present in the upstream Spring Framework 6....",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e4759504-7404-53af-be59-3ce9d09f3938",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:e074f731-1cc0-5446-9ea7-853594899e30",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0e7f5c8c-506b-5d3c-8adc-effafce1ce26",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:d5bac05b-8c9b-5f0b-836f-6bc8d2f437dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:1d3670ae-e2bb-57ed-b4b9-d8c1d0ba4a01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:2316c065-d3ba-5b40-9c74-ed4ca6b0ca53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:96d24b7b-eb5e-5e5a-9fc0-f56d359df596",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0ebe4c00-cb61-569e-9788-67b471cddedd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test, and is fixed in 6.0.23-tuxcare.11."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
        }
      ],
      "bom-ref": "urn:uuid:0d41595f-5144-52e6-af69-30f8cdaf50f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.10 of org.springframework:spring-test, and is fixed in 6.0.23-tuxcare.11."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@6.0.23-tuxcare.10"
    }
  ]
}