{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1a05e5a9-7d4b-5dcc-b16a-f7af7b6fc72b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-mqtt",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1",
      "version": "6.3.10-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b4f92a0f-c527-5f09-b781-6b0db0aa75c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40987 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e69fb0dc-4f6c-54b5-839d-edc977cd3bf7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47856 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bdb48a6e-d067-5243-a75c-a17258ba156f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47859 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f507b4f2-2ff6-5100-8872-335ab457d857",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47861 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c5896b25-140d-5e4e-8ef9-6191773e6b96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47862 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a04ddb18-84f1-580b-8cd9-a68eb2cfd3df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47864 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:60d4c347-36f0-59c1-be65-68a6d33d586e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47880 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5f18cd86-a6a9-5de2-9f17-e3f9f1b0bdbb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59274 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a761878c-be94-5872-a708-32eb2453b020",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59292 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:50d453b5-9f35-5981-ae4e-144045209c86",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59293 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9fda3fb9-ebe0-5953-84f1-eb2b28416c78",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59311 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1a1f0297-87f8-5c12-bdc3-7f244b23aeb2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59321 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8fb08cf0-a488-5e75-bef3-c281164c0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59322 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:47ad23d4-3a20-5b61-bce8-6319b861c48a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59324 affects version 6.3.10-tuxcare.1 of org.springframework.integration:spring-integration-mqtt, and is fixed in 6.3.10-tuxcare.2."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.3.10-tuxcare.1"
    }
  ]
}