{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2d192313-c0be-5b83-9348-6002d5dcb28e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-test",
      "purl": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8",
      "version": "6.2.15-tuxcare.8",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-test",
            "purl": "pkg:maven/org.springframework/spring-test@6.2.15",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:30a2ded9-1a54-59cc-b1ff-3539c4d1dfa1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cb34fe30-4c20-5357-b000-ae5f88354ba2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5853c2d3-bee3-5c3f-ab9f-0c14f7d4f816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8c87ab85-2cc0-5100-8b00-5f852bc8d2fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b41ff851-dd89-5692-ba45-340d1bf293b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ee708260-e458-5386-a3bd-d3b87fc34a47",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:292ec688-bd3b-59e4-8e01-a17f4249c722",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ae797c58-5b18-5621-b14e-0dfeefffeb03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:545b4453-bc8c-50a6-93ea-3ee45432e3a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3f0372a2-f27b-5b0c-8dd2-dc19977bd519",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-1257 does not affect version 6.2.15-tuxcare.8 of org.springframework:spring-test. not_affected \u2014 CVE-2018-1257 is NOT present in Spring Framework 6.2.15-tuxcare.8. The vulnerability (regex DoS via malicious selector headers in STOMP messaging) was fixed in upstream Spring Framework 4.3.17/5.0.6 (April 2018). The fix adds a null check before parsing selector headers and makes the feature configurable. In version 6.x, the feature is disabled by default, providing even stronger protection. Th...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:dfa5d712-ccea-5b60-bf6d-a72bf1716138",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c978f8c3-6158-59ee-a8df-4ff45b9ed885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4cce433a-823c-5507-9301-94f19da25777",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5613d71b-a1d0-5d5f-9782-684975454196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:bef78ec3-c744-5329-9f5f-4db5794c55f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b65f56f0-1d7e-508c-ae59-9453c608d38b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:545adeeb-f506-5ea4-b0e1-ed5e23198088",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:09038abd-f560-5bfc-8c56-d22429cc82c5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cb9c204e-1317-5166-9668-76072857cbd5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.15-tuxcare.8 of org.springframework:spring-test."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-test@6.2.15-tuxcare.8"
    }
  ]
}