{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d3d05812-937e-51b2-99c5-ea0ffe6d8ae2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-messaging",
      "version": "5.3.29-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:42551ea5-3df8-5c68-80f8-5311052ba5b5",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f9ba4fc-fda6-5c23-8c11-aca9dd630bf9",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83a20df5-31d5-5bed-a48a-19108a150118",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9690e656-8850-5757-a517-03a214c4059d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81cdcd77-d3c0-54b3-9025-7ae2700bd8c0",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48cb1cd9-fb04-513f-8394-e8f5581d7d22",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63ec05d5-921a-5a13-923b-753215a2b532",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8511e5d4-924a-5447-b169-fb421b2c8541",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:630c12b8-16ad-523f-a808-451b3c5525a6",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccf6f474-28ff-5aed-bbfd-baea6f7116a8",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0227c15-9910-5a20-a069-4eb3dbc1193c",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a64eac1f-353f-5b7b-afa1-fe1911546381",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-messaging 5.3.29-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97c7238c-1c8e-5071-9093-e1e048c7c1d5",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d4c81df-a51e-5d7c-a672-1444f1f0d3da",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:427df1a9-8f40-5227-84cd-f1f45c5226ef",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b1a095d-5552-5acf-90bd-a09435c001cd",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:226e38b1-e0b6-5fe9-9f56-929d583b6b6d",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:846bb917-19f6-5eae-8224-3af6c3855a2b",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d6a1b2d-1c13-55fd-92de-eea720f1c12a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70aff2df-90de-51b4-baa9-b6b2837145bd",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d61bb45-f206-553d-bd2e-da272bc68299",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64f8ed28-2ba3-5473-bc48-0a36e0ef7548",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4123e1d5-ccd4-5496-8b0a-306237cd92f5",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.7 of org.springframework:spring-messaging. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa7ac32b-f640-50d1-a50e-bfba8d4a88de",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:093bde26-56a5-5087-88e2-9054d4649a6d",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1afe66e-371c-5f1b-af08-e868464a9c02",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b241a50-9914-59b9-9e94-3d3fbe465adc",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b89bb06-bc59-54fb-850f-6c35346985e8",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6ff81b5-393d-533c-9072-c01052b1365d",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:404dc044-8e80-50ed-ac47-1993003bf3bc",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e567b04d-9140-57b2-8cbc-8c24272068db",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6dd23f7-dfc7-5237-9ee4-bf79a230a623",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:039869d5-07e2-53aa-85cd-576686563796",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:342c80dc-5d8c-50d4-ba88-11049ce3b269",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f71daf3-b4fb-5737-8a6b-a5d31be93d91",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a61c6c3-1561-56d7-a1fb-c52c4cce46b1",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5de1b781-2aa0-5a8b-9bae-55c8abf33e5f",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:471ce0d2-40b7-5beb-813b-aa448251aa70",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35d69fae-37e2-564e-ad77-ad3c3fa6d932",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a38213ed-efbb-5046-b0dd-4bac4322dbfb",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f186ee60-73bf-572e-bd0e-1b8a604e5f55",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50a88327-7fe9-543a-adfb-0e415df2684d",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e3abeb4-9d01-5121-9a73-100014cf1b42",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:709c7855-2afe-5d12-8e07-016a7701de04",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2381aa3e-4693-5329-92a5-f5138e436684",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31f0bf8e-6776-5288-aad0-c91b313550c4",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46ba0790-ce12-5379-b539-b7cbc032029a",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3250fb86-eb89-5d9b-a59f-06f63b54a56a",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d003164-be1f-5262-973f-cb1228cb06e3",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5689b52-f23a-5d8d-af94-2b95f58b5435",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d094cfa-fa1c-55fa-844a-2cb17e7454bc",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.7 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@5.3.29-tuxcare.7"
    }
  ]
}