{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:edfddfef-1385-544d-b576-5ee820104945", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6", "version": "6.0.11-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-context-indexer", "purl": "pkg:maven/org.springframework/spring-context-indexer@6.0.11", "type": "library", "group": "org.springframework", "version": "6.0.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:87636b4b-0da1-5ad5-a631-24b64b853a79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:940bff56-4c3f-5009-bbc5-51841550d22b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4b61f292-6c00-52f4-9277-dcaae1abfe01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:f80d726a-071d-55a9-a452-e9d3eb903ef2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b03e92b5-bb77-5503-a114-0ab11add1e7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0b72ca1f-df7f-51fb-ad08-b7b6d6cc93e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d226c260-48f0-56e7-af3c-40b6d5937e8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:71781004-4b80-5018-9a4e-4edb2a1a8377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:973578b4-47d8-57ed-be9c-884cb8e5a1fc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0230b754-545b-566c-aeff-cc6779fb37d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0d726705-4f44-54bc-b1c0-bcc61dd21c7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:dfd931a2-81a5-55ab-994c-be2538bb514c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:de0a81fd-8ef8-5959-8ff3-7479cc4503c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c8e9f1a0-c236-5966-b4be-45e7c49ba6eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7ebbf479-11ce-5bb9-8dcf-97460ccba164", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:21454a00-1034-58ea-a6ec-c17aa0da0b10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ee07d3b7-a8fb-55a5-9acc-a2bd60e2a1b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:43a186ef-5c67-59d8-ab4b-c8f26f798ec9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bce8d7ae-77b5-53f6-b48d-3e9c34b5ac7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:03a1c9df-6097-5cc3-a9d4-7651ef4d0420", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:687ab679-1547-5c1e-a210-029a8ff2ba5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:53846949-a8f6-5ab3-8290-b26c4456bed1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d1c73094-cf30-59ff-a41f-c239e031626a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:6de43ae7-136b-5804-a22d-307dd982494f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8ad264e5-24f7-5d0a-8bdb-900bf1247b56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bf1aa30b-666a-5c7e-9e7c-519b18e5baaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:671806d9-39d6-57c3-ae99-3217d5854189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9f82fd19-98f1-52e9-9e16-411e1fb30f30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c21b42fd-68bc-5b3b-b8a3-0f4a630dfdd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b821ad6c-06af-5a46-9346-654a43ca96bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b78ed763-8ced-58af-a1a9-298bb840ccd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4169acf6-7251-5df4-8d1b-c32e2f928a30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0ab4c7db-3e68-55e9-8bc6-f8403779e8f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e030f5ba-fa08-5c4c-92f8-80f788ea3f6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:17c995e1-e478-5473-a13d-e38a47549333", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:924c97bf-6b42-5f9d-81ce-ea7232115601", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0fcd2bd7-f149-5d2a-943a-2c6777fff38f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:90e16ef4-1acf-5895-9b9e-045d91f45d91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7d4bc922-af86-524e-b1bc-66766bf0153a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer. Spring Framework 6.0.11 is not affected by CVE-2026-47890. The vulnerable SSE (Server-Sent Events) view fragment rendering feature was introduced in version 6.2.0-M7, which postdates the target version 6.0.11. The Fragment class and related SSE fragment escaping code do not exist in this version, making the vulnerability impossible to manifest.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:beb5b94b-532a-5e13-a323-6389f4753d99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ac701a35-e303-5a37-95bb-495a25d3227f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:04e5c090-c2ff-59d3-9ec4-17e55d350f3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e426fae4-b5c2-5bae-906e-704da557b3c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:65074c03-f92d-544f-a212-610d5ec31d09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:ab0df630-7400-5a95-be29-b886ab5451b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2c327f88-5041-5dc7-a17d-e383215c7f96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0f156fa1-5514-5116-9387-bb11b83fce9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d582839c-0364-5562-b2d5-4dfc150b5984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-context-indexer." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-context-indexer@6.0.11-tuxcare.6" } ] }