{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e7f59aac-ce42-52c1-acad-4eed4555ccdc",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-websocket",
      "purl": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2",
      "version": "6.2.12-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-websocket",
            "purl": "pkg:maven/org.springframework/spring-websocket@6.2.12",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.12"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c2295a9e-132c-51af-abf8-c583f00deee9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:79bde6e7-3f9f-58db-aa68-46ff91653bd9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2ecd7da8-f4bd-55f6-8602-7f37a2036b9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:31bc5298-627f-585f-aa88-bf4992b733db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0902c0fe-04b4-5efc-93e7-dc11ebb04a9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49d33e8f-7098-5d4e-8fca-cd0e9d26706c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dad7c739-4608-56a0-94db-164e53e7f059",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d9d7a3d2-3909-5e8e-ac69-73db13180822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:881b7288-dcad-5e95-a259-d25379777870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5efb14a4-dc31-55dd-9935-251a1d767f39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e06443cf-660d-5c6d-9218-afee900dbb0e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5bfc9392-f632-5e89-b403-4868f32802a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c845831-5eb9-5582-8983-9b647116bcc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:259fe9c4-4606-557b-8852-4facbcbd08a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:71aa162e-8399-5247-90cc-ce86cc42983a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fa7d26a9-6674-5e10-aded-92038f3b2d9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d7446e68-d599-5876-a6d2-5fa4c189eb2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aca6b233-6473-5707-aa3a-fa700354224d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3db40264-0e8d-5d57-b421-b87ca293bb07",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:163176fd-2fd8-5e29-9a51-66afbf5b3cac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:661a8b68-1c6d-5c7b-a263-7bdcd5b89286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3eb94919-5a4d-5d1f-a5af-c696275c9d5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ea882219-4517-5e3a-9b9b-dd7965059ed7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:38882dcb-82ab-5faf-b2e6-2e9166bdd340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:412f4ce1-7dfa-5006-84b5-ab0dfc80384f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:906972e2-2672-5cd4-8c0c-b72b160953fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:edf66d29-52c0-57c9-8bca-576e2da868fd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bf6f78df-3f27-566a-81a9-1576224d9ada",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a041a53-fe68-5cc7-a7fc-17360412de78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:861e2b88-05ac-5ee7-8634-f618fcfe9fa2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ce1664b1-e880-5808-a805-a80b25fb6b9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d12ec13f-b4b9-5ea1-86a3-cf3bd3b58fbf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:633fba59-efe8-5d1f-9d95-6db0d960c837",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:63db24ca-42c4-52ad-a039-44198ff0f77f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b6a079b-64a1-5b4b-84f3-0c92cd9dc63f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:898dbb23-34a0-50ee-b537-24c410265c84",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c3dd195-dd32-5e86-8f61-c08a5cc870de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:23362f68-2e9d-5bc5-b49e-3d18d9ffb270",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-websocket."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@6.2.12-tuxcare.2"
    }
  ]
}