{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:35598515-9402-551f-961c-c772ee92e4df", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-instrument", "purl": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6", "version": "6.1.21-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:808f3502-bb6a-5e88-a298-c78f5dc6ea7e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.6 of org.springframework:spring-instrument. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:d1ca2ff5-1220-5c41-aa3e-97d0e143859f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.9." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:c2972f69-1a74-5168-8582-1839f64a0606", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:8d559363-fd2c-5e7c-81a0-e664a1060c3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:a43bb057-e067-5151-8417-7b0f9849be1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:d9f5d82e-ed28-57f7-b49d-5d3c17a3852c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:0bb43f5e-10e4-530e-b6d7-aeefecc93d9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:dcc055f9-10e9-59ce-816b-5a1133d29149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:990066d2-2283-5b56-973b-e48580d6d918", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:c78d1fc3-e531-5927-b2c0-3a4b403edb54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:a6b3314d-cbc1-579b-9a16-2f582fd54c46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:ef3a0b94-5568-58d2-abac-4566d8bbd346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.13." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:fa351728-43e0-5a84-98ee-060cd260f93a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:ebe41dce-3209-5af7-b0d3-008c8bb4747e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:611e83b4-5813-588e-8c04-cc8dda7d2240", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:da2f2e15-5ebe-597e-93fa-c4ee1f9b78e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:e4e3bdaf-7026-5bda-952b-c6eebf9932cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:db4de543-a681-5549-9c9a-27ffcbebd139", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:58e25319-0779-534d-8dff-c070e2c09609", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:6558d3a5-7a5b-5e64-a753-691c1bf43370", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:2ef13147-5e36-561e-b6d6-284451ac7ff8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:d0b5ef1b-5dce-5754-9e6e-9b1a1f594b8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:8410f0d2-30a6-5d15-af79-e9886053547a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.8." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:a9351e60-efe2-54fc-be7b-3447b8011aa2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.10." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:d9356c91-9e5a-5cf4-85ba-43be9c65071a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.7." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:ff77a4ea-9311-5a3c-ab18-f19bd36602e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:df2370bd-347f-5524-8575-4e5e1203fc5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47885 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:e989c469-a042-5dba-9b9e-36cd4afe88ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:08598d1a-8fcb-54dc-801e-e5446c0f6754", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:d2881c8c-b467-563f-b70c-8a71dda8773d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.12." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:68be7261-db2a-5755-8d87-331bc7e05a52", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:3d2db6ac-b248-5217-8896-467675259f94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:fe251b39-6610-53e2-b2b0-15bcbd99ecd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:f71b8a65-b4ca-54bd-87a1-a620c11a471d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:5425c75a-200f-5f72-b2d0-074c0b6dd2b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:5685d553-4c4f-57e9-8a2f-91ff8ce5b7a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:afa16304-87e0-5d38-9b42-0a6cc42c9c6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:abe47af8-56d0-51ef-9576-b373af1e7a04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ], "bom-ref": "urn:uuid:ca50b3ac-4f8f-54a4-b4ae-6eedd619ee51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 6.1.21-tuxcare.6 of org.springframework:spring-instrument, and is fixed in 6.1.21-tuxcare.11." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-instrument@6.1.21-tuxcare.6" } ] }