{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:92856231-dc48-5955-9e17-6abdabd28a13", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b63c65f-8c49-5c64-8a4d-a4db92933efd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:987cce24-da2f-5a21-84c3-a1cdddcd5e5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cad98347-d589-5551-be8a-a43137e14b0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77474ac7-076f-5166-8563-1b0d73e68b34", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2e40242-526c-5615-b60e-d48d5efb4c06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:30d9defb-84c4-59fa-b6a2-5c08492fee50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4fadce73-f960-585f-9713-406e587ed75b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd275b02-93bf-509b-af33-145fd4963acf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e3ed2163-d0ee-508c-b437-dde2d6e9c3a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52468d0a-e239-54a6-93a0-d1263cdfc03c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e82f42b-59b0-5308-9c9b-47b5a2db5eb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:070c4ecb-1292-5044-a179-ab23a13a476a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:936bf004-3d7f-5f19-b4da-0fab4dd7e2a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b4fe0ae2-98ac-5c29-8908-c34ef796d9e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:531a9c4e-ac73-577d-ae1a-087e0e7daaee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e6ba4510-53fd-5eda-af26-c24d5ffe6d6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54668240-9ffc-5328-88a3-e7a1cad2a5c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c496397d-8acd-5b7d-961e-8293815fa405", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ad7ceb2a-3c40-50e2-ade0-ba838e1e49bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6717f0f6-3874-5024-a5ad-443c82b20682", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0fb449e6-ae45-5a13-a852-3c4f5d17d6e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1c82f8ba-482d-518e-ad1a-668e7a19fc0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88f9db1b-3be4-5ee8-89c0-f97c7b25342b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7cc91816-0ca7-5904-b85b-fcc57ffa2abe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:884944cf-18cc-5d28-abd0-2dd08eda108b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85abd389-96fa-5266-b9ff-5bba241fe164", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:277c849d-ad7c-5574-a6d4-fd3099277879", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:33bea2f9-6a22-522b-b72c-ba45154cceb5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35882969-5204-5f38-9862-cb040d29f056", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:324df50e-8491-568f-bf98-ea957897cfb0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5687a1cf-bc05-5d57-b685-5088413a46ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e734981-04de-5689-9004-fbc56e759b92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4c9f2e8c-628c-570b-af3f-139cc7d2f5bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:35aea711-5923-5c5c-848b-979f0fe370e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3f7b9a87-5d40-5caf-bc20-3830f2a229b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:deefcd4a-5d93-557a-9b5b-a31b852f03d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:297d938c-6e0c-5a79-9c5d-a2f7ab827eca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb367ad9-8152-5b24-8722-18c8878d29ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a80afc7-b159-59ac-a940-e52db097463b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23469703-5a02-5ce4-8665-4f547081b346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8eb51f58-44e3-526c-8f2a-76ee8918dd40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:454235f3-48d3-53c2-b0d4-3c142d6d3794", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:782c0e0d-300c-5e75-a469-43c276c59983", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db07ab30-ea7a-5ab5-9601-27a16b53c922", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:692bb404-7bda-5e6f-a7e4-445c1524e8ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e47c07a4-f820-592f-b999-3daee331a280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98d3d0dd-2079-5c05-90e2-5f8b81de906d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:374d39d4-910d-5f50-a6da-64975fccb1b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5bb04579-8bee-52ff-bb7a-a68e09f6f24b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:17f7d882-515e-5f26-aa36-a6c8ed3214b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.27.RELEASE-tuxcare.1" } ] }