{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:af83d821-aef7-54fa-9d5f-b6b6fc17a05f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-zeromq",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2",
      "version": "6.5.10-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-integration-zeromq",
            "purl": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10",
            "type": "library",
            "group": "org.springframework.integration",
            "version": "6.5.10"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7a654684-d3a4-5ab1-939b-15a704a10b72",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-40987 does not affect version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq. Target version 6.5.10 is NOT VULNERABLE. The upstream Spring Integration vendor fix for CVE-2026-40987 (commit 82ac6f3b68 by Glenn Renfro @broadcom.com) is present in this version. The affected range is 6.5.0-6.5.8; the fix was introduced in upstream release 6.5.9. TuxCare onboarded upstream version 6.5.10 which already contained the vendor's path-traversal defense.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c90077b0-ebc0-5f3a-bd63-2dbffe38cb6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65eb3316-c066-5437-921b-a46a32e77417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47859 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2944d439-4b67-572d-98a9-73b6890e2f4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47861 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbe30cb4-1125-5299-8c0e-9ca506e94649",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47862 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:716c7d23-8996-5881-b70d-201065a00950",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47864 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:47b78eef-e520-5f42-8f7b-dd4dc9a3577a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47880 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ce6b8272-bef8-5c7d-838e-714946057726",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59274 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c369bba3-686d-59bd-a486-093a41352a39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59292 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d8dcdf09-8b42-5f67-87f7-46c9992da2a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59293 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59307",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6e4528ae-8af7-57b3-bf1a-800606bade82",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59307 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:54c7ac64-00fb-5f44-8fda-ca89074e9315",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59311 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:66e8ba1a-b7ae-5785-99ba-731c66cc41f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59321 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ad6b2674-0200-5fe8-8af4-308dca0c679d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59322 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f9997c6-5808-54a5-9554-9f68893fd823",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59324 is fixed in version 6.5.10-tuxcare.2 of org.springframework.integration:spring-integration-zeromq."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-zeromq@6.5.10-tuxcare.2"
    }
  ]
}