{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a0c624c9-3e88-5d64-b3e5-93ee20d23c2a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-graphql",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2",
      "version": "6.5.10-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-integration-graphql",
            "purl": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10",
            "type": "library",
            "group": "org.springframework.integration",
            "version": "6.5.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:52816f4d-3a7d-5f47-8438-53b2d25b0ab6",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-40987 does not affect version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql. Target version 6.5.10 is NOT VULNERABLE. The upstream Spring Integration vendor fix for CVE-2026-40987 (commit 82ac6f3b68 by Glenn Renfro @broadcom.com) is present in this version. The affected range is 6.5.0-6.5.8; the fix was introduced in upstream release 6.5.9. TuxCare onboarded upstream version 6.5.10 which already contained the vendor's path-traversal defense.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:52dbf14b-42f3-5899-bfc0-3026b1264348",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:47c37efc-9788-56b9-bea1-e60f075a76db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47859 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b5b39a39-419c-5b12-96b1-21b23162019c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47861 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dededd97-b6bd-5f06-a4bd-b2e4182bd333",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47862 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2f5aba0e-c5f0-5d3a-af23-adb51eca8f28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47864 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:960b1076-18a2-5d67-a24b-f57ff5dc3fc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47880 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:161d5570-2b30-5e83-a552-5915cb1e1fcb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59274 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8e8909a3-c3a5-5b96-b555-d1882d6e7ec4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59292 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3072de18-d2b5-525d-9401-827617417c97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59293 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59307",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a37dc319-7d46-5304-b109-74556c15635c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59307 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c5f5978d-829a-5eee-8a7d-837313dce115",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59311 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a1461c72-cd31-5633-8f89-3563b3e43a0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59321 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d34e94d6-2059-5666-962a-de0cd8565a00",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59322 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:39623ffe-466f-5b86-bed2-c7d387122de4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59324 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-graphql."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-graphql@6.5.10-tuxcare.2"
    }
  ]
}