{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6c0a91a0-7a97-5593-a10b-c7430cae4ccd", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:71b04c6e-67ed-5cb4-a265-99710ec0914f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0b874548-5dec-554a-a66d-39cfb3aae276", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:213acccd-4ca8-5a0c-9b2b-3a961fd02435", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:65e4b208-6193-5514-af44-c51b6241135a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e75c42b9-d11b-5a79-9ae2-69a45516a572", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8a2774bf-f925-5d21-a0fd-1c15e0721e0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f6c172ed-c8d6-51a8-9990-3faf58cd6dbd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6a84b48f-82ad-5c5d-ba4f-2f7e6d702103", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5da19a5f-cd0b-564c-9867-0de5b389072d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:18d06400-5d97-5bf7-a1b6-d9aaa40af628", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:828befd2-a20b-52e9-9c8d-634a6b4b3dd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5aff8564-3c66-5dca-8ce7-15f3383851ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5976a119-4add-5260-b836-eda86b4e0473", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2e2a39d0-0a4c-5ec9-adb7-6c499c9ae794", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ac8d656c-89a8-5323-a1d7-eee7496f6364", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:918d31cc-8fe2-57e5-a632-430e36f960e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9b5012e4-c775-5765-98e0-df521acb1f13", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jms 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0dce4b53-dc05-5ef1-9a96-42f9fb556a83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cb55c719-bc8f-5818-9193-8e1046d5d206", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:109a63c2-1245-54ea-ae24-e67da24ddbca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:00ef8e69-0a5b-579d-88e9-9b8917fa8de1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e49c831a-39af-5201-a5da-51de717ca508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:471daa45-7d39-51f3-91ca-ac8acf31feb7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1e700e50-b504-5c22-8eba-64fa0a1039e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1a299e83-5407-58c6-91c0-1d19a6f65dfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:632ba53d-46bf-569b-b06e-f482c625aebb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:42daeafa-a8b2-54bf-a989-d80f130ce320", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ffad264b-9d4f-5180-ae71-48d00ae79d1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:eb848192-1521-5c63-9d5e-89e1e86869e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d5e6428b-b73b-5827-ab11-399d67a79d11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8079c8f9-90cb-599f-b680-f493d49308a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8aee9b47-8f22-5692-92d3-a3a9ccf52ead", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8d572160-1a85-592d-b79e-cfd5dd4f98a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5ac42249-9836-51ef-8076-c21fbea2b6f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:def0af70-6c2e-5e47-899e-cc89abe2a615", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:500ce305-6b73-533b-ae3d-b09ba616b362", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:76d44945-6244-538d-bbd9-94146163c29e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:57b9f470-fc37-50bf-8fe9-c2f95b67376c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a5bcc0ca-2806-5f43-9be2-e2997b19d646", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a67f035c-e7b9-56e2-bc48-320edac753e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9d559455-3e6a-5c8b-b296-d2b7908375a3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:da24a309-6e4e-5f1e-9ba2-4914f629ab2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:16ce5668-881d-58f3-a32a-1cc1acbda4bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9d82ce25-49a3-52aa-b733-e2a74fb5f82b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4d3ffd32-69c0-5d3f-9f7f-0a73763ab92a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5f64de8a-1c69-56b6-a933-e3f51ccb4be0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4e1c9420-e78d-503e-a002-5855d33140bc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b20ddf95-fbf5-5dea-9f42-816b134af046", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:58263ff1-f6cf-5a4d-924a-36177d9c81cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a796fcf3-f7bd-50e7-8da9-04da02c2baf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f067fefd-6a27-5d32-82f6-4047944ccc09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e1c062f4-1648-5983-9708-37f97066e639", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d48c2f35-6e33-5393-ad09-578710433576", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:55ba98ff-45a3-513d-beb8-97345e5aa3e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8693d98a-beb0-5a5f-8c48-a069904c7e15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bc8a7148-4f85-52ca-a0c4-31b026b577ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:abcd334b-8cea-5a85-a36c-7ad5cf761c48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fd70b792-eea6-59cc-979c-bca19435ec02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e62c5479-569d-5983-9f4a-3c76ea3685d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.4" } ] }