{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4436d8b1-ff83-54d8-a801-445e160ac4b1",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2",
      "version": "6.2.12-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@6.2.12",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.12"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65a34158-7d31-5bab-9426-b99720835520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e962a271-093f-5b60-91a2-1d02a3e77ff6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2a8fe801-f7a9-5e8e-be6c-c48fdfe75c1c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bfd2f686-f85a-5b3c-8f88-544d9de98b76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ec8b0d07-3c70-55ee-bc8a-d1e5c0fd62bf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d18ae47c-a5bd-5999-93be-a5b12e3a90bb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e15d3cc1-61f2-5a3f-877d-aaa5996398cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bf47c638-91d4-5bdf-962c-4a324fcbc26d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c0d727aa-0861-50ad-873f-1921193fa841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d34c9f3e-da8b-5d0f-8042-8f168be15f43",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 6.2.12-tuxcare.2 of org.springframework:spring-test. not_affected \u2014 CVE-2018-1257 affects Spring Framework versions prior to 4.3.17 and 5.0.6, where attacker-controlled selector header values in STOMP subscription messages are unconditionally parsed as Spring EL expressions, enabling ReDoS attacks. The target version 6.2.12 is NOT affected - the vulnerable code pattern is not present. The upstream fix (commit 5bc80fc094 by Sam Brannen, June 2023) disables the S...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:94f889de-c6ef-53a7-b59d-7a6f8e8a97fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6bf089ee-242c-59e1-b2e5-4613c4a3d2cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:024fa93e-1d20-5979-987c-b2cd6e6901f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9a85f9a4-0d24-54d6-a141-d1bc72665d74",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:230794ba-316b-5193-ab6c-9530213875f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:224ff43e-8cc9-5aa7-ae9b-53612c9e2b20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b6d20ff-30d2-5ea2-bf4d-989a68fadde3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f9d3eae-63c2-5dc6-a574-a2f9b33ba841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:88388070-4536-5139-b1c1-e07705cda8be",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-test."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@6.2.12-tuxcare.2"
    }
  ]
}