{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1c791cfc-b48d-5bb2-8639-0c0f5b7469e5", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3", "version": "6.2.5-tuxcare.3", "pedigree": { "ancestors": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@6.2.5", "type": "library", "group": "org.springframework", "version": "6.2.5" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:8a567116-af71-5cf4-a902-161a3e1b8694", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:65612cf1-7cc4-52d2-90d7-0f4eaa35caf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:edfcd1cd-4838-5338-87ea-b79b89a48856", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:a5a92fbb-3d13-5b96-b2cd-398ab6095e04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:b315981e-c296-54b9-9f30-35e01283e528", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:8465e82d-7370-5254-802d-e934b8a36d2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:54a6d296-d4b3-50e4-8e6c-00fc0feab4a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:aaea5913-8664-559f-8509-66c5360028a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:5038303e-f72c-58e7-b2ac-2daec503b14e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:36c2751f-169d-5898-a05b-786171cca9c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:9df93b46-3991-559a-8603-21c4dbc3762a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:00378440-f0c9-53d3-95ef-ddfa6500e0dc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:d3fe82a0-aed7-5fe3-b070-a8b3431f6468", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:73c625c3-edc3-50bc-b35e-4aee00e4a241", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:f85818db-ff4c-5830-9e89-0fd7da3591d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:520592f0-5513-5f23-be9a-9e7b4e55687b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:5f1d8082-253d-5fee-822b-b2e323f142ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:689f6875-ab47-5ee3-9f75-b06d25ca3a3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:d081d5ce-abbc-57e4-801d-83535b6faace", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:27bee5b1-5673-5a1d-b15f-401e2913cb8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:5fe9ae77-c325-5c73-9b08-ab70ec513ffc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:d016d802-5c0d-56e1-864e-7db9d478a0c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:fba269df-25be-55e9-bfab-70c160816ab8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:2b654d23-667b-52f9-a8ea-8f68a277b3aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:1c54331a-319a-5cdd-8d48-e9894bd2291a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:3fe41987-505d-59e3-b12f-3b3f643521c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:aec07b45-02fa-5b73-afa9-302a0afb2c78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:ad56a74c-b551-5f7d-9f68-6a6bd981875e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:7fe6ca9a-7b5c-5c5f-bb5f-36a9eaca06dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:3375f461-7469-5dbb-af6a-f6e7022962cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:907f37cb-24f3-56e5-a69e-a18eb861d831", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:8ea14e77-aed4-5c98-bfff-30c52cf84a20", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:3f5933be-a565-5077-b1f1-f42e136f2b09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:e1de951d-56bb-5d85-b58e-f81c7fcc9995", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:c2ebf58c-e246-5683-a00e-0f73be41ddca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:bf44cc3a-0a12-53cc-b066-412e91fe1c1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:348c7bbf-134e-5951-be39-de0113d7a8f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:08998b51-443d-5ee7-8283-b2f91bd72374", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:d2cf9a05-b65a-5e99-bde9-61d8c5e696a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:0684c070-5a02-5ae9-bf8a-a1054279651a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:6bf8182a-5d03-53b9-913f-a042862a2c22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:4ce58d04-8315-5b45-826d-488e641ee017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ], "bom-ref": "urn:uuid:e86f2105-f98a-5b16-bbb1-710a491d150f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.3" } ] }