{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:47e935fc-e96b-57d7-a8c1-f0fda912081d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-scripting",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1",
      "version": "5.3.2.RELEASE-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-integration-scripting",
            "purl": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE",
            "type": "library",
            "group": "org.springframework.integration",
            "version": "5.3.2.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2020-5413",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:270b5ce5-e96c-5933-ad77-ce8690f0bf26",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2020-5413 does not affect version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting. Spring Integration 5.3.2.RELEASE is not vulnerable as it is equal to upstream fix version - 5.3.2",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1933260b-0989-5d08-8639-ca6f3c7a55c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40987 is fixed in version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting."
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:df0e9ec4-5357-570d-8c30-098aa58b0409",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:95d37cc1-a0bc-5fab-9811-cb78e0a7f0e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47859 affects version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting, and is fixed in 5.3.2.RELEASE-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dc60d6ef-4f03-593e-b9d6-d66063ad15f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47861 affects version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting, and is fixed in 5.3.2.RELEASE-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0a481c7a-f5e7-52f0-b12c-71e23d5b9246",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47864 is fixed in version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0569597e-a94a-5e78-a40e-73b3716b9444",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47880 is fixed in version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:437be4c4-a630-57ea-8851-906addc46bdb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59292 is fixed in version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:050c02bc-f5b2-5ca4-9f1e-a127ae950aaf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59321 affects version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting, and is fixed in 5.3.2.RELEASE-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:efbb91af-8950-5c23-9ac3-24d68c61d235",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59322 affects version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting, and is fixed in 5.3.2.RELEASE-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e4dc01a1-5867-5385-b85c-dcd94e179913",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59324 affects version 5.3.2.RELEASE-tuxcare.1 of org.springframework.integration:spring-integration-scripting."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-scripting@5.3.2.RELEASE-tuxcare.1"
    }
  ]
}