{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0bd68bbe-2e52-52e1-9363-1adeb0ea7692", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6", "version": "6.2.1-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@6.2.1", "type": "library", "group": "org.springframework", "version": "6.2.1" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e02d34dd-0a6b-5d50-9ba5-bd336da0bd48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:87d21cd9-b9ba-5c93-afc6-46f398166ffe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:60711026-b847-5ebf-af90-68934bb963c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:46d3cf78-dfd1-50eb-9142-20cb87abad63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:cb9c958a-24e9-5e02-b624-9ab1fd363755", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:5825df6e-a825-5a41-b0c8-134da74a9a25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:88c54691-9228-5ba7-ba1e-38aefa68402c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:fb97571e-5a94-58a2-aeb6-94dd87622185", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:bf862e11-3a3e-550a-b956-fe7a689485d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:cd463f1c-f9f1-51c5-9e6c-826726306c6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d838fadb-43fe-59ad-89c5-65884cb26346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:380479a4-be03-51d2-a5b6-b446e3649c29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ab869504-0514-54cd-bacd-8feed5c3bc27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7133ef50-ba10-5b30-a62b-846f2dc1030a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:eebdc1b0-12b7-547d-b719-4aa503c9f409", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b70bfee1-c220-5d33-a6ef-cfb97cff8483", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:91af4b11-6c4b-5b8b-9c7b-d31eae2e1468", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7154f5d7-075c-51bc-84ef-a01d76353a1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3d314759-4f67-5f47-9bfb-e3870c8e1fd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b0090eb7-aeb3-59c1-aa1b-c0f3c983bd35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b8fac0ea-67b0-52c1-87d5-b18d93183af6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:888fa164-2c55-5d48-b5c5-2213cfcbcc78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e0089bb6-089e-57b0-97c6-8c25c6a47d56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:332a9155-299e-5305-8e94-6c56a94cb3db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:67b8006e-f5c5-5320-8266-34dd8b3875ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:93db21a1-7e40-5ab4-b81d-f97d11cd71d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b310c02d-e053-58ea-a10c-19b01dcafc4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:453d87a0-da3b-5b57-8e83-47a93b974322", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:af922351-ee32-5727-a1cb-839df62c70c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:846b8686-ab99-57a4-8cd1-66c8a73cf0df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:96ff153d-7b8a-50a8-a45f-96006fa34d63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c31488c9-692a-53f8-a432-400488d6a1a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b0dee5f4-4b66-5cd4-87fb-c81be1a6a517", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:11140836-72fc-5b81-9ec0-258909b758f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:fc451a22-863a-5c67-bff4-bc424dbcdc02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b7cc27d2-8765-56a4-b33d-f86a39138b1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c9ceb582-c9ac-5451-a4d5-dfd31930d06f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:55ce9146-8cfb-50d3-a81a-9be5292a014a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e5aff986-4e2c-5c8a-8e64-0e4d94cea32b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:23f6208f-7c74-5af2-bcd8-c33d7ee2505d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:49c6a72e-afb0-5fc1-a869-b8ac29932d40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:129e7ffa-7160-5d53-b4dc-463776e2855b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:f593e710-881b-53a9-97b9-28fa4187684e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.1-tuxcare.6" } ] }