{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e01f3e93-89f8-58b4-b030-29145dec3301", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:292e539f-a7f9-51e5-a50e-9f3a586a094b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:cd1865f5-fec4-5a90-9177-3f408c9b5599", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:12c4b804-a372-557c-9a1f-46480bdcdc84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7f70d3bd-dfdd-5f8c-bb85-52a279f6e80e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a03786bd-6e88-50f9-8b14-3c9f54949542", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7dcdded1-5239-56ab-8fc6-23cc96e7780a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f2671cfc-e9fe-5ac6-87fb-c8f274357eee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:908bfc7d-d67d-5aa4-b969-9f34663e99b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:95661189-6abc-5920-b38a-8682465f81de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:dbf6d029-73a8-55c0-96af-b92e6ea9e1d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:366bf29b-83c9-50cb-ad04-781fcf7124aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f2964e2c-efd9-5715-97c3-048cbbd6efee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:96ca7b7c-fc8b-5e2b-8e91-19816d14e4a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:28dea554-7f40-595a-8e8f-4254314eb195", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:4eca1bf0-567a-5602-afac-59bc3c5e7196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:61216d4a-0f68-5fda-bdd3-177102c61c10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:197a8adb-87ca-51ab-8018-5522f9fb71e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6edc31d1-fb61-53e0-934a-8cb6738e75b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8fc9d450-05ba-5030-82eb-3e1d295ec767", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b8e0f195-1b42-596b-8aa5-213541441793", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:740d18e3-65eb-5f0d-8e96-52343125bbb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:752e9aa7-62a1-5232-81cb-7cef37e52e4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-websocket, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fa78d751-44ca-58cd-9ea8-f65a2be71cb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:19a36a60-a951-5fe2-bc79-8d8260b91149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:4c690f3f-0623-559c-abfb-1a4925af1536", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b1a3c9a5-df32-589b-b472-9159e50738c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6cbdff52-dbc0-5c65-9c65-8777aa3354b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d7d283e7-5c1c-5410-90e4-b0b2c6b5967c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f9324d36-14e3-5adc-96bd-6b25ea84a759", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:bd946e26-aafd-5cc5-a504-7b13f7ec00ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:64bce55a-c3df-59dc-a621-49dc4be4bc5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7074d4c5-9c10-53c1-a6ea-fd7c0d5652f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:96eb0472-98e8-5b64-b173-8a9fbf9aeb95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:69d0d6a4-6ec0-5d9e-b17f-76b7d519c1db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f046ec97-6704-5344-a164-aee080589a3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8df28bcb-10eb-564e-bd6b-c8aba7781f9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:4dd8f6ee-dcda-59b0-a755-63674b3f7f9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3fed1d72-9749-5684-9cca-bac3213e16b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9c80532d-7c0e-5f05-a649-bc479cf801a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3892c162-4087-512e-8fe5-4baa9b32229e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b0a049a3-3411-544d-99d2-360f8dda8cfa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:db5917aa-0f88-5268-b340-da1e4f74273b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1b6f2c1d-1f4b-58ae-b279-0d3e8207cf94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.3-tuxcare.2" } ] }