{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3bb03112-7ac8-534c-8611-b0f8d125da21",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-jms",
      "version": "5.3.29-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7b7e993b-bebc-5cde-aa43-e34b6531bbb2",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa0381b2-b1b5-5392-ab33-64b8c96f0d0b",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22243 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e46f78d-5dbb-56a5-b458-dad2846c841e",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a71cc33-0762-5c2a-9deb-564e1893ae0b",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bdbd0dc-dbe8-58a4-804d-35b710b0f6b7",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7905ca42-9928-56ac-be18-07da5c35bbb6",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38809 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63bdc25b-5a13-5de7-8faa-11d7a89d59ae",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38816 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0f1ec70-1cfa-5828-8f3b-f3fddfd43c35",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce98424e-0a9f-5e32-a131-18654630df74",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0244d8f-e2c7-5cfb-bfa2-f8ca9e422e8f",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38828 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ede255c-87f8-5e65-aad3-b3a0467ded45",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94e36d8f-618b-59f7-9a31-54249be4248d",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-jms 5.3.29-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:543ba7b5-e031-5b7f-bae6-8d14b65da095",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75fcae42-5417-5d85-99e1-b7eeaa5ed2b2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15ddff07-78c5-599a-b425-581a6c1937a1",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86a41679-dcce-51f4-a7b8-b829d753f20e",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ca106d5-6a2d-503c-9ef8-f8c24c8d85e7",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.29-tuxcare.1 of org.springframework:spring-jms."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jms@5.3.29-tuxcare.1"
    }
  ]
}