{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:447016d9-da39-5f24-b5c0-2b0cbfb72140",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration",
      "purl": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2",
      "version": "6.4.9-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-integration",
            "purl": "pkg:maven/org.springframework.integration/spring-integration@6.4.9",
            "type": "library",
            "group": "org.springframework.integration",
            "version": "6.4.9"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4378933f-f36e-5ef1-8f76-a68717d6134c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40987 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9dec22c6-d68f-5301-b410-b87b864e1281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd40995e-33a8-52f8-8e09-298e90107855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47859 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6da4b18d-0dc0-5891-91e0-73a7fec43378",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47861 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:06cf7623-a42b-5c33-b4f1-1a06b6081eeb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47862 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:26479a1d-ad26-5990-967a-b476a7daad04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47864 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:687e05b0-3a00-52e0-af2e-035395e1e0cb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47880 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2f80073-7fd1-5d95-a9c1-959ce49a4f3f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59274 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fc412ef7-e7a4-523e-b58e-2cecdd6e13e3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59292 affects version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration, and is fixed in 6.4.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a871c51e-76f6-56d7-995f-750ee6acc405",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59293 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-59307",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a4c3955c-96c3-5854-a025-7789374d7c5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59307 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a47e338a-e8ff-518b-a693-2350b9151d1a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59311 affects version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration, and is fixed in 6.4.9-tuxcare.3."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a2a2d969-10ee-5d10-938b-4303c2adf77c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59321 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:46ca8903-277c-5006-b651-af68f88681de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59322 is fixed in version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:58b50ab7-b992-50e8-90b1-c880efe516d4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59324 affects version 6.4.9-tuxcare.2 of org.springframework.integration:spring-integration, and is fixed in 6.4.9-tuxcare.3."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration@6.4.9-tuxcare.2"
    }
  ]
}