{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2444c515-0eec-5210-ad13-5fc962e802e6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20", "type": "library", "group": "org.springframework", "name": "spring-websocket", "version": "5.3.39-tuxcare.20", "purl": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:65bdd6d0-a765-52b0-bdf8-67539583dd13", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:cb5057db-8a4c-5ecb-a48f-e6a9b590d4ef", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.20 of org.springframework:spring-websocket. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:7c056d9e-643d-50a5-9ba2-c33eebc4a661", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:dff486ad-15d4-5b7b-8eb2-c25c0fe422ef", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:1ed8c28f-25a2-539f-a6d4-8a9f501b3082", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:c79b0f0c-29cc-5767-867f-d5c3e8fe5e07", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:307bc98e-53b5-5227-ae55-ac91514ac750", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:43133f6a-ef65-502a-a862-38f034d1f488", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-websocket 5.3.39-tuxcare.20." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:bafb6110-2f84-522f-95c5-574b1077fb13", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:12d2e459-cb8c-5036-9964-dbd02934ab98", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:220a2cdf-f417-5e56-85ac-b4be53a72bc8", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:43f7dbd0-e4c2-5358-b1a0-0de179c45927", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:c444c3f6-4138-50fe-90ed-d138ba908e82", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:abb56187-18ff-5314-9123-2981538c2ddf", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:65d8c49c-4532-515e-94ba-8188fcfc186d", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:a819b057-376e-5b9e-be42-0e63789b37bb", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:0eb59d19-1bd8-5363-b752-d26e6c3626fb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:9179ba8f-63a9-5bb9-a6b5-ab01a24f2873", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:10a02d7e-d1bc-5841-9658-e6447cef46c1", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:02071198-37b9-51cd-b438-75c617d424ba", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:b3f6a7ce-5140-5138-b7aa-f51569f44103", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:3e115320-d59c-5935-a717-d06e14078955", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:c036f862-925f-5001-ab6e-aee53dc0d276", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:8a24d5b3-7531-53c2-ac04-be1c10591092", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:d8bbfea4-ac46-58a1-b8e1-f2aa30efc4c6", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:b23d5563-ef2a-5cbd-8981-36e8f9ac4251", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ee32cfea-514a-545f-99d7-aef44eaf882d", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:947fc7c2-c20a-5ab4-8f97-3b5c4d8ca4ec", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:7bda5a50-d087-586a-8f45-7a0bd4797b80", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:4d42b43b-c189-5eca-a4c0-2e4cfee94a9c", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:425f11f8-5704-5d69-8745-be6f12b218da", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:de194df9-198a-5915-a59d-832d5c8bf292", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:47feb5ee-6dfb-5d09-9b41-3b874c139bf7", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:5ce3ae6f-d4a6-57ce-b920-4e04187a0073", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:fa70704a-25d8-5f9d-8920-2c82f62cad92", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:22346d97-31f9-5d3d-bf6e-1f98ea6d7256", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:49e0f65d-e5e2-5d1f-8eb2-ae3db42279e3", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:97e5c259-4b26-5d92-8b5f-a7af6b5b645c", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:0e73e447-1737-5d24-bb63-eca85cad82b5", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:a1d252a2-551e-5703-9c4d-b68d710d5565", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:bdc773b0-331a-5aa0-b470-6a50da160d92", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:909635ae-9be8-589f-9327-0f0c3d16d9cb", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:c3de3b7f-2332-5da4-934e-3f7ea6a69d7e", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ce2e10ca-623a-5db9-8055-3ef6fa32ebcb", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:c0e831d8-dc15-5191-9adb-10c36090a27d", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:ede10af6-30ec-51d0-8f21-9331603d5390", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }, { "bom-ref": "urn:uuid:3b9f3d7b-ebec-5a1e-a310-64e21efe6364", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.20 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.20" } ] }