{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:38508b92-0476-54a7-ad33-588a71ec8838", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1", "type": "library", "group": "org.springframework.integration", "name": "spring-integration-groovy", "version": "6.5.10-tuxcare.1", "purl": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:81475aa6-1bf4-5783-8403-6970155cfe2b", "id": "CVE-2026-40987", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-40987 does not affect version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy. Target version 6.5.10 is NOT VULNERABLE. The upstream Spring Integration vendor fix for CVE-2026-40987 (commit 82ac6f3b68 by Glenn Renfro @broadcom.com) is present in this version. The affected range is 6.5.0-6.5.8; the fix was introduced in upstream release 6.5.9. TuxCare onboarded upstream version 6.5.10 which already contained the vendor's path-traversal defense." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:917376fe-f606-5ec1-8aa2-771098828f6c", "id": "CVE-2026-47856", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47856 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c44a0aaf-0529-5b17-a8b3-9493ea47cb1c", "id": "CVE-2026-47859", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47859 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7a0d848f-d3a7-552c-8d57-6836be5f5314", "id": "CVE-2026-47861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47861 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c24ec84e-6958-57dd-92d5-1e3968adcf54", "id": "CVE-2026-47862", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47862 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4ea30f00-4112-5721-9e5f-82c22c9ba11f", "id": "CVE-2026-47864", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47864 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7b596448-072b-5333-b90b-0df9abd72239", "id": "CVE-2026-47880", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47880 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ee1755e6-e2d1-55fa-ae6e-70afb97b0dc7", "id": "CVE-2026-59274", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59274 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:516604d6-a7f5-5414-b0ba-0175a2b109c1", "id": "CVE-2026-59292", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59292 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1767b504-da57-58d3-a3f5-1a0185d733a1", "id": "CVE-2026-59293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59293 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:74a819e0-e674-5792-bbb3-b1379b82ab49", "id": "CVE-2026-59307", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59307 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:afa64517-65ae-5407-aebe-f727d27ecd48", "id": "CVE-2026-59311", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59311 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:73f89161-5882-5705-98b5-7cd147816e76", "id": "CVE-2026-59321", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59321 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8264c731-016f-59f0-a950-67ed230eafb4", "id": "CVE-2026-59322", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59322 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a1c5127d-613d-592c-9f8e-4f394aefd0c7", "id": "CVE-2026-59324", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59324 affects version 6.5.10-tuxcare.1 of org.springframework.integration:spring-integration-groovy." }, "affects": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework.integration/spring-integration-groovy@6.5.10-tuxcare.1" } ] }