{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:879087c3-28aa-5392-bfb9-b5e3892f95d1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:80d0c412-c5f0-5969-b041-c13481ee114f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b3934f62-0211-5c34-9909-ee391e3bbdea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:51b902f7-2456-515a-b948-5b9874a342f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:0907cb70-61be-5839-967d-2568afa4964d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2f0a523b-d9c5-5af1-9eb5-297cb1e57f2a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:35c8b254-ee30-5611-8b15-8b37f8f67def", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:53c73e94-19ea-5570-9904-d04a248cf9c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2023a120-0647-509e-9857-b3305a7c6fd9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5eeb5c9e-6676-5c5e-a5bb-4fedf18350a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:712f0106-562c-50be-9575-d06a67eee8f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2cf02ab0-c462-5daa-837b-d74fab9c8e9f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5cafdc89-caaa-55e3-a157-e24014694cc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d7b3eb0e-d1b6-52fa-ae0e-e7f57b14a751", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b0f9a903-9b3e-586e-8dea-ab49ccca94ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:036fe673-552f-56b1-a4f4-4152cfe61943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:52786e2c-9515-5ba2-9630-7b0ec88a3306", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:dad215dc-692b-518c-af9d-f2816f66a20d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:25908d6b-52f0-551b-9521-3b955cb58bd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:0b020180-3bd5-54ff-9e81-a7955211ec6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:78bfbd62-04b9-5b27-833c-2f7ea1fd3899", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b81eca40-88a6-5507-9da5-14208a74f421", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2e53a6fd-8026-5542-9d9b-7d77e46e47d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-jms, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d8e7bd2e-db9a-55c4-86b2-495f5ae98208", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e8b6e80d-baf6-5689-95fe-5da358c1975f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d20ef85c-2d29-537b-ae1d-1844d2561dcc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9d97aaf1-b6e9-5e1a-8cb5-2d4f90691307", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:eef70c33-9657-563f-b7d5-ad8ae3e3a397", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:34275cec-6588-5e1d-9b84-d7bdb3942de6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8a312a9b-1c7d-5767-8acb-d7b36973cc50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1ee95f29-ebaf-5b96-b420-8b35f0e812c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b780299e-06ad-5728-9a20-aba582908308", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2a86aa7f-349e-5fea-86a0-34b82aac8e89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:663816c0-b943-5880-a160-6bc4445aabd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8ab2cb4c-76d2-559c-9a09-e6c47c8958ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3577e468-d149-5ecd-b87b-02b4c4dc45d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:bac4481d-ed01-51bb-8950-10b9d83a917a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:66d19dda-9d28-5010-84e8-21b855ff9109", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:656d59f2-7234-5d0b-9ada-7a9313157b03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:83a7412a-5fe7-51eb-bdb6-6eb2bb2e4e1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ca63e902-1764-540f-8bd8-f2569dd1a6eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:063c60cc-4c76-5fc8-b2bc-0b16a81cff33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1a4d4220-3322-552b-9fd8-6841c075b339", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c28f40b4-7496-54aa-9a22-9b9a6c979bf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.2.3-tuxcare.2" } ] }