{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:39851c64-0277-5e1d-a046-f1353b8b59cc",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-websocket",
      "purl": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1",
      "version": "6.2.7-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-websocket",
            "purl": "pkg:maven/org.springframework/spring-websocket@6.2.7",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:554ac140-1d98-5f7c-8a0f-7fa5462691f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:95682109-a937-5852-8a49-426720a4ebb7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7a8f4aa3-eb6e-551e-9e85-89ef732f07ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d60ed16-90a5-54cf-afae-74fafbbed90a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f68b55b3-688a-55ae-ae9e-e0f20528ec19",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a5779a65-b211-5007-bcca-d8b01f086fa7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d88fb2d-2ec8-515f-9491-8af011a07638",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9057dcbe-ff85-5554-b5e9-34faa37ea3f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d968b13a-0044-5146-b0fe-a4ea71d32694",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:922e483a-2cc5-5719-8d08-c35ac2412526",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:08fa6262-2253-5f9f-aaed-ded7a9ea28e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:16969a66-e09f-52bc-bc92-f02af6759291",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6544f210-5d7c-5a93-9c98-ab92c9701082",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f95bf3d0-6477-5aba-86d6-298aa16439e4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:be2c5ed7-2210-56bd-8d9a-ef2b692bffb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b1627257-0af6-58ed-a740-f897ae77a3b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d9c05b5f-1c48-5b9a-bfbc-8398dd9f7b58",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e47c9e04-6e5b-5823-918e-a8aed5acadd1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7cd602be-4f2e-5fd7-a1ed-c25429f01bb0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:28949485-ed40-52ed-9a9b-f3c928ddeed0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e5220398-3e3e-5291-8a99-89c86f4b0e61",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e63193d4-7835-597d-a932-455ae6b7960d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:104baa22-2a44-5ee3-bb33-a306837787c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9816a414-79ee-517c-8f7a-4253e064565e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9ed83566-a8e3-5131-840c-42fa866b1102",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7da23444-1781-5fab-9a5c-6c179df7e5f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec4b50be-5974-5b2e-ada8-3480d2101542",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f288d3bd-24b2-5585-862c-00cb7327e9de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a7a1ecb7-89ca-544c-8f3a-71aaedfe4133",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7c39bfa1-544a-5ac1-86b0-4114078f40af",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:05cfe126-ceaf-5000-a022-ef68897341a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3bd0d708-a9f5-502e-927c-9d0e45d50aad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bf72d163-8b74-5907-acf3-8d071cba8081",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e4a37e82-0771-59c5-b19a-0016a0c25b53",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d043ac3-d6b1-536e-9ed1-b709b2f41368",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5883b35f-27b0-599e-9192-470dd6016ffa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:36bfe824-583a-5dc4-b4de-b7761ecbe1ed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0987affb-b318-5ff8-a522-32a13e75105b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d4159ccc-cbfb-50a1-9e19-c4a72bdb160b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:16cf2684-90b4-5966-9a93-1c4298384b19",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:db41e34d-129a-5d28-8088-f1a92ed541c8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:53f669ca-cc3f-5b60-a03b-8f0666d76e63",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.7-tuxcare.1 of org.springframework:spring-websocket."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@6.2.7-tuxcare.1"
    }
  ]
}