{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:46c704b9-7387-5ed6-a385-e7f72494c2f9",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-ip",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2",
      "version": "6.5.10-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-integration-ip",
            "purl": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10",
            "type": "library",
            "group": "org.springframework.integration",
            "version": "6.5.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:36beb5ad-18f4-5645-b1ab-600132c6cf63",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-40987 does not affect version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip. Target version 6.5.10 is NOT VULNERABLE. The upstream Spring Integration vendor fix for CVE-2026-40987 (commit 82ac6f3b68 by Glenn Renfro @broadcom.com) is present in this version. The affected range is 6.5.0-6.5.8; the fix was introduced in upstream release 6.5.9. TuxCare onboarded upstream version 6.5.10 which already contained the vendor's path-traversal defense.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:399486f9-f73d-5947-8f85-6ed72faa55fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b63137b-29a7-5c1a-8d50-cc5336fba181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47859 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65218ec1-7e4d-5027-8b88-899fdc0080de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47861 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:051c0b46-0aa0-560f-bf8b-37d0883d2338",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47862 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:83a8cb5d-5257-5a88-9ccc-053b70aea68e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47864 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b2b1c06-f942-5df7-9e60-4b16f4272477",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47880 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd93abf0-841e-537e-bdf4-cd498e7c7830",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59274 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6e1c8421-ca95-508b-96cc-452a71989b10",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59292 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5d76d18a-8a3e-5b00-961d-2a5d382409e9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59293 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59307",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:348fc5b7-243b-5cae-aa3a-a71649aca455",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59307 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:35ffbaa3-f2ee-5964-b258-2686288d4e94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59311 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:762ac421-afa3-5ce3-8c12-1768281c40bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59321 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0134591a-ceb4-5b3a-9754-e99d3c188174",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59322 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e9364939-9348-57cc-a365-728c63a806a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59324 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-ip."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-ip@6.5.10-tuxcare.2"
    }
  ]
}