{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:36f9a95c-b079-5b00-96b6-6dce6b997014", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:47f38e54-c817-5340-b6cd-d10df6c1ecf7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0ebf021d-c4d6-5046-9214-e66b3f26d0da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:99dfa1f6-fe35-5a10-8723-81220f3a25a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c46f60ba-f622-55da-91d7-f346f264b246", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5868ed0c-b9e8-53c2-8558-20eb394504a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9ea3a7d9-eb23-546b-976f-6ca9839b3636", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:595d3936-758e-53f1-a399-b2cb08ed3e5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:647ae8dd-ead4-5ff2-a256-047c86d71c41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:4dc3105f-8865-5c61-a7ac-f1e9d990f4eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3a76944b-a3a0-5316-8dde-3b6bea992efb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:612b4bae-7444-5c7f-b921-157f290c9bd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dfaa1044-6fc6-5eb3-8400-5d4272b36ae3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e7b19797-3504-54fb-9dc7-b1e1673b41f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e3dba12f-377c-507e-832c-01652614d04f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cee658c3-526c-526b-9c5d-a44f15ada243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:efd9fff1-6c21-51b6-be46-2652655715c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:15446ac2-faf8-58b1-bbf5-e7fc4e2d8a69", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-messaging 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cb1b1707-d2de-5ca7-a7ad-4254cb66c270", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9754a5b5-0c29-5027-9564-663a84a7805c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a5c18303-fd62-5af1-8740-ab40ed1f4c51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:23cc9439-0f38-53ad-bda8-5b478ebe7931", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3c01bd19-d12a-5f85-a74c-d679df0ea75d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:896ef782-5552-54f6-a17e-2eb80bb7f5f3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6d2ae641-8382-5cda-bb3a-422f3e8978c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dc908176-b577-5463-bb36-b7cdabd6b9e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6f08d108-f321-5617-b6a3-86601197096e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d961114a-1a44-50cc-ba90-9bf0ba2ac15f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1402e7c1-b3a1-5e45-9413-c6ea680c62bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:19fe604a-70a8-52c6-aba0-017a5fe4e98e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:75d85ab0-56f9-5bb5-94cb-8e85e56815b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1af75b9b-71bf-5285-8ef9-6edd7da6ed83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:72007d78-b369-5359-a175-0a3385969b0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9c2697ba-4b8a-5d61-89d0-fee314154b2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:53b8632c-b180-5aa6-a55b-7aa640865d0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:97766070-d0c5-5ece-bff6-42499b298349", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cd17040c-b249-5b5a-bbd8-8d51482c8ab8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:868bf159-4c5f-5a5a-83f2-dafb04b757a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:82fda142-f5d8-56ed-ae3c-59a13c7a1641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:cd8dbf81-b223-503b-b09c-ff340ceec895", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:15642486-35b3-546a-9629-21b0ce75132c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:eb22374f-b929-5af5-99df-2d1990babf6e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:093b7190-77b5-596f-b10c-1fdfd4145063", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c470b88e-6146-53c1-902d-b08394eace69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5eea948a-9d94-524f-825f-f6d90c955b5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f7036b08-56f1-55f2-825e-5dbe7b219aa2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b19d7081-0c2c-5388-aec3-d3fb6eea5ade", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:0540f696-474a-5b09-98e2-75e04e4784dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bd6dd887-4967-5701-96a9-c1b987c07b72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8c9a6d2e-31ce-5467-9083-5d259429a29f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:70072619-88b7-5916-bde2-4948877ec7f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:dbb6edab-948c-536f-aa90-911f344958ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b9f68584-f409-5f6f-8fb0-26fd4db0f406", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:24e1e437-7096-5ddc-8be2-ac2e0b394bb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c66b54da-e5da-52b6-96a1-408415de32b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3d3305f8-5f23-576d-9cd6-2e60a9824eac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b30b57da-fa7b-5ec0-a336-a193271fae96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:7c8bd888-4ab7-5708-9259-0359f7437558", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:106307eb-2a75-5f3f-899e-805a7cb7d73e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:67b5d28d-7596-5ee3-8bd5-2f5218ed63b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.1.5.RELEASE-tuxcare.4" } ] }