{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:27432f73-3874-5ab8-bea0-5d2539a7055d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-hazelcast",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3",
      "version": "6.5.10-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-integration-hazelcast",
            "purl": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10",
            "type": "library",
            "group": "org.springframework.integration",
            "version": "6.5.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:53841ade-d016-54fe-b9b0-e619bc68a134",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-40987 does not affect version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast. Target version 6.5.10 is NOT VULNERABLE. The upstream Spring Integration vendor fix for CVE-2026-40987 (commit 82ac6f3b68 by Glenn Renfro @broadcom.com) is present in this version. The affected range is 6.5.0-6.5.8; the fix was introduced in upstream release 6.5.9. TuxCare onboarded upstream version 6.5.10 which already contained the vendor's path-traversal defense.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:55dfab6d-0b86-5131-9ae7-ffcfe7900037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f5858f91-0028-5d32-8fa4-793d2c919154",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47859 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cd40f1ad-18a0-52a7-8575-4199698e018c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47861 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9c0aef43-5f16-5e21-9177-0bffac2de824",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47862 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3c52521f-89fe-5f90-8314-1da4f306cf01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47864 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8f3da612-1716-52ba-a798-452dc96d0ca4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47880 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04a90089-6065-5584-ad8a-a562cd994acf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59274 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2078a29e-c9db-515a-9953-fc09f0687f3a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59292 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:842e3f4a-c508-5197-91f7-f3291afeee06",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59293 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59307",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a52b0f4a-28a5-5449-9564-51a5c860c72f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59307 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1029cb21-cef0-545b-9d45-3c8c49d4ff38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59311 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:430473cb-b315-5b21-a564-d90a5d223321",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59321 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fc926e7d-b006-5a9c-b7e4-bb917ba9f5bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59322 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:48fbab30-f68a-5510-b991-9a03dda5d541",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59324 is fixed in version 6.5.10-tuxcare.3 of org.springframework.integration:spring-integration-hazelcast."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-hazelcast@6.5.10-tuxcare.3"
    }
  ]
}