{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6d20d346-ab89-5b3a-aa44-a8c0a48e612e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "framework-docs", "purl": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6", "version": "6.0.11-tuxcare.6", "pedigree": { "ancestors": [ { "name": "framework-docs", "purl": "pkg:maven/org.springframework/framework-docs@6.0.11", "type": "library", "group": "org.springframework", "version": "6.0.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:76b65467-1985-5340-9502-7a8a9ca32011", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:50125e7a-3181-5d66-a6de-b3ff99c96e48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b9bf36e4-fd84-5ee8-82ee-bf346dedeaae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:85ff6fbc-c094-5c86-9400-d3e979839ada", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:af3e0039-5021-559b-9387-b9697aa9c9b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a6ce7bb6-2a88-5fdd-8a05-40cf1cf4ed9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c9999c43-680f-5109-a796-add9d33c9f51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:62737c0b-a0a7-5fce-b5f2-50d121ad00c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:888d979e-4c9a-567a-8fd3-474e515128dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d49f3c6c-0ead-5592-986d-77ed080e237d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c3ab8be1-edc9-5d15-8cfd-06d4b735955f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:77487ccd-32b0-5ff0-9f22-c39916b08c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4dc85720-706d-5914-9f39-e086f4a9067b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e83f7224-f163-5641-a1de-d403710609a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f27fd12f-80c7-5738-9f78-6c4b2424cd54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1b02ed7f-17c4-53db-974a-c68b982cc50a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9a28d0b4-68b0-5495-8101-2d5d0a469d2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cf358c1f-b253-5dd8-ad68-e283f749a410", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a1500121-d358-59c7-8efc-570e7ba390ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f8d7d2c0-c4fd-5404-b95c-86dec963c7f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f4746038-6310-5f40-bbb5-86dcb50f479a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:32032405-f029-5cbb-bf86-82f5f75ec4c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:afb4d1dc-120a-58b8-9f49-e6f79c9c4ea8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5700a7c8-97d0-50c1-997c-0ec4435d967f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cbac4ea2-45c4-5207-848c-30a7e0571442", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4376768f-8832-51c6-81e0-fb622f012df6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:607860fa-5002-52d8-bc60-a63c64c31be3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bf1eb823-c93d-5058-82e6-83f6d53006dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:67cf3fbf-ffd2-5bfe-a46a-6884620fcecc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:824eb6b7-a91b-5484-81dc-76fa70020fc3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:14c72355-80dc-581f-ba95-195071e7c146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e67160e7-8c42-5f9c-a9a2-987594565c05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a09b896c-c8c3-5d1f-befe-22c2bbbc2aa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2be6b18d-62bd-5f31-b250-ce75d1a7ec7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c85bf299-6c39-5ee3-9926-891bab051360", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:af412568-c405-5889-aa0d-0650767ba716", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7a0133ca-491c-5ada-af31-3ee520439c22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e1e42979-29e8-5754-bdfd-9cfc3a60e918", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:28bac01b-3e54-5eee-9336-c260c7939f27", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.11-tuxcare.6 of org.springframework:framework-docs. Spring Framework 6.0.11 is not affected by CVE-2026-47890. The vulnerable SSE (Server-Sent Events) view fragment rendering feature was introduced in version 6.2.0-M7, which postdates the target version 6.0.11. The Fragment class and related SSE fragment escaping code do not exist in this version, making the vulnerability impossible to manifest.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bcc1c3be-0d75-5a56-aba3-87952e5d700b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5e982f73-9eb1-5d94-8064-9e880d4ee027", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5d64a17a-b0ce-5aba-9ec1-5197ec611630", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4cd3f294-ce0a-5497-9af2-41c22d81fbb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:08ebf6db-7fc2-55c3-810c-76b382b07ae3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7f603bd3-7edb-5e56-aa2c-41c9cef3c872", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d0c6240a-5e9b-5338-96b6-8bea9b4ae032", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a8706c62-c783-51eb-9aa4-5bcea2ba48a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:51befce2-ca77-52a5-9fe3-91df9629cced", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.6 of org.springframework:framework-docs." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/framework-docs@6.0.11-tuxcare.6" } ] }