{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bdba38e4-236a-50a6-8c00-a5731a932571",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-websocket",
      "purl": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3",
      "version": "6.2.5-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-websocket",
            "purl": "pkg:maven/org.springframework/spring-websocket@6.2.5",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:96a45726-1e03-51bc-bbbd-d2a0050e0f1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9f6d4f4-23ea-538e-b073-d658a206c180",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7ccf92ff-f937-5d95-8ed0-d84ef21884d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aec42f28-2c51-5d38-96e4-2909f1653ec1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:752b80bb-6d24-5e33-b944-2f236b6a2be3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c384c6cb-2afd-552a-9e8f-4e66b549e2e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:83fce4b2-ed08-5116-a947-7ab85487af9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:80b0c024-1d6d-58a1-91ca-0d5904698413",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d90d579a-93e0-5905-a0fc-25945b43c047",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ba895225-1996-51bc-9b2f-58b76beae830",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b7d746b6-eb70-5b21-928c-68f526aed181",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7c9c673f-50f1-5b78-b22d-de273a9aae40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2a9ddbcb-2d3c-5536-8a8d-1d02f6b88aa0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5c8dd6d5-b45d-5e09-b053-091f7f77f70d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7f42ac75-0c69-5907-90f2-90367cd26c8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b43dfb84-a588-5504-9b75-0034ff54e3cf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bd91bbc6-97a6-58be-a863-a59864a1f270",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6884eccf-57b6-5b4c-9e66-1d4c3df76d9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04abcf7b-930a-59ba-bf30-a046ac9279a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9c40e7c2-b2ee-54bb-af03-29cfc646d1cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6c328d4d-c056-584d-a044-2d79203b1e92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9378d13-9fed-5c99-873c-ddab9790456e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9ce0f4b8-af78-5bb7-bc3e-07e3f3699047",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b033133a-1ae8-56bc-afda-82ad0a20775b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:42f5f9b0-ea34-5bf9-b65c-a9d50a59b328",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fa85a9ad-6eb3-5be1-b0c4-978bbec4b0ce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ee071213-3abe-5e26-ad82-9e0a846fe270",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:69e4951f-cfd5-5422-a16a-70c524898129",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fad51796-c917-58ed-ac1f-9d830618559e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9a4aba9-ba10-5998-bedb-1266433022ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:29a73962-5a92-5b8a-887a-585c347bf0c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ca862829-9dbc-5235-9420-a5d60db0a4ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8f91a3a9-3e74-5cfe-a6ee-a6455bc5e446",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9484be7e-c020-55f5-8cb2-001eae2a9c14",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6acd7a05-f63b-5c6a-a6f9-0b99730c6e49",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b710a501-5ad9-564f-8c43-38d3aae600e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:62be53f7-4394-5886-a6ea-6eeaf631abf0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f5c67ed1-4da9-5251-8276-270622a3baff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e21782cf-69a7-5549-aedf-753cdfca4450",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:08643a79-9256-5cf9-84cc-fee0d3e89090",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a99b7a86-35ac-5dcb-a26c-9f3a988edeef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:db97f44c-b212-546a-9a2e-d356c24acf55",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c5bce0d2-3450-50e1-ac9f-01b0896eca62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-websocket."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.3"
    }
  ]
}