{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7321c8b6-5622-504a-9c76-2a6d933889c8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6", "version": "6.0.11-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@6.0.11", "type": "library", "group": "org.springframework", "version": "6.0.11" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0323d8d9-3d1e-5770-abc9-df91f290c93c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bf92a100-f13a-5746-8898-ea49b8b34fe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:17543840-9b30-5a79-a60b-5892e8278a4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:55e9664e-ed9a-5ba4-84fa-ae2a64a25d0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4a0705b5-b435-5d5c-8e23-aae9ee4ebaa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:255cccce-8589-5016-b76a-f96fee6da439", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e427d8af-253d-563f-ad59-46ca35dbd4e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e099f2dc-b145-5ce6-8cf7-e1d039e4f886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e1ecfb49-2350-54fe-a336-6ed89b1ffe71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4efbfb15-ca0d-576b-a8b4-cb20576682d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:9b31d06f-3183-571e-91eb-eea3da1696a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:cfc22f3a-2b2e-5fc2-b973-8790955938be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:df6b5a27-0b5a-527a-85f7-7e9e7f7d78b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:663bd4b0-dff7-5807-b20d-be533664f3ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bd528773-311f-5396-9899-6451522f92e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0cbe463b-9d9c-541b-adf2-51ca92e4bdf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:d96dae1a-d9b5-5120-af39-479891b4e219", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e001570e-73b7-5fee-aca3-c8bdf9d55fee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:602f21bd-d2a2-520a-813f-d13bf4253a1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:759af54c-27fd-5628-924b-2ce50e4a09e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:4cf50cdf-12e3-5433-a773-9242d5e42991", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:e65d7645-7c67-5a83-af8f-ad5c0249c630", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1a8fe05c-a148-5f16-8c7b-8c3258aec80d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:441ccb02-4605-5089-8efc-144366355a3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:a36a0dcb-6b0f-5e91-bd0b-191000ad8d6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:b5914759-de84-5487-8d37-694bdac056b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:74df4819-cb7c-54dc-bf96-e4a7e5d2fecb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:7bc8357b-3178-54c5-99ba-d3a138e7dd54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:40c46cff-d1e3-5f95-a4ba-8b576daeb07c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:eaa34e08-38ca-53e8-95ca-20a2cbc6d9db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:33563c8f-6043-5637-81ff-017af6cd3cfd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:1c077524-e206-5478-bcaa-c03481495641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c68cb749-fb81-5a8f-b61e-607409924a2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:c3a49db3-60cf-5c36-b7da-c76c7f431e5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8233fbe0-5e67-5c38-9a66-a7d4b3b7e903", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:99eb96f6-d1d6-5155-9e9b-60825f4fed08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:52add1e2-05cd-5aca-966b-44f56379c0cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:0e1cb652-5da6-51b0-a909-5744dbc4555a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:859b3710-68d0-5e56-baf0-3a890f2ddef1", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.11-tuxcare.6 of org.springframework:spring-jms. Spring Framework 6.0.11 is not affected by CVE-2026-47890. The vulnerable SSE (Server-Sent Events) view fragment rendering feature was introduced in version 6.2.0-M7, which postdates the target version 6.0.11. The Fragment class and related SSE fragment escaping code do not exist in this version, making the vulnerability impossible to manifest.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5d4388c4-9184-5684-9b79-e033cd0c9b20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:bf18b3e0-3736-5d35-9e2c-934407c10f7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:5e406f22-0d0d-552c-ad02-d7bbb2337564", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:266f55e1-bbd1-5170-b60a-3c1cca417f39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:699a3ca5-6db2-5fea-b008-be32f787cf3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:2dc15ba8-f1ac-5e2a-a5cc-a5c7357dc1d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:8031878f-f8a3-5374-8563-6d5629648f61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:dca6b84b-cd20-5381-8821-1b7d1b7f125b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ], "bom-ref": "urn:uuid:620d1e31-92fe-5481-9c59-5ff2a1771b59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.6 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.11-tuxcare.6" } ] }