{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fd1ba75e-b5e9-5400-b21b-1589a9672a0d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1", "version": "5.3.19-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:fdfa0499-6bb8-552d-b4e0-bf9938dbf421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:cf0b00a7-46a3-55bb-967b-97dd8e6df186", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:41282fb6-b383-5d73-a8b0-83b3f7569d7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2b158017-ab7f-55e0-a540-978b1b844837", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20860 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:12108f04-3432-53cc-8c2c-aa663a0fd527", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2a409ed3-44f5-51f8-a656-e1e352e222c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:c5df3a19-7850-53c8-8b9d-56c58ce7f482", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:cc23d297-2143-5340-aa28-84b22d93bb67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:64dc52b7-a5aa-58f1-9d07-42d735311c90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2aa43187-8dec-5e92-a9e3-24517c9ed63d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:02f66fec-95a9-58eb-8ff9-fa6d81995706", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2a22d68a-1c15-5465-b9a8-dc14243877d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f8d73814-7ceb-5098-a467-59856c7bc589", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e4544672-1bf5-5859-aae6-65506d1198c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b1d9fa29-5382-564b-a6b1-373b2024e722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:4bc0cf67-f840-5262-b2c7-e1d0a800114a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:71be2199-d102-502b-86de-2a64e392a3c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:f23a5e68-92f2-5053-a9d4-62bc0787be9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:4b93927f-b499-5020-a945-c326c0a79a21", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b9ee4625-a070-5054-a794-e7b6f9b1150a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:4f550bc5-474d-55e9-ba3a-fde2810889f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a00a2401-4d17-5b21-8023-a581bb770654", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0b896083-e03d-5553-b1d5-e1dfab64c01c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b47b575f-f827-5c7a-9809-6ea4b9624b5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a73af6a0-f17d-5b21-b363-b7e559cc792c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:a1170c82-d74b-55d8-a526-559001dd0631", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:6b7979c0-c7d2-5b9b-b9f5-0f4d9bcbd243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:108fb03e-e3cf-5b75-9ba0-c3f6ea6a4012", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:fafc5aa2-7ada-5896-b8a9-f4f859572511", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:ce4adb0f-471d-5c52-ba62-0c45d4d5031c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:9ffd1da9-26b7-5fd5-b02d-faf5980e4ded", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:882c8288-12cf-586f-94be-280169314bf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:76157a59-c357-562e-9465-dd05ea8d154f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:fcaad10b-0ccf-5679-ad17-74c2715c6506", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.19-tuxcare.1 of org.springframework:spring-messaging. not_affected \u2014 Spring Framework 5.3.19 is not affected by CVE-2026-41847. The vulnerability (filter parameter shadowing in Kotlin Router DSL) was fixed upstream in April 2021 by contributor shindong.lee@riiid.co (commit 07ba95739b). This fix was included in Spring 5.3.19 when it was released in April 2022, over a year after the fix. TuxCare onboarded the already-fixed upstream version in September 2026. Both ...", "justification": "code_not_present" } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:b921ecb3-0cfe-5f21-abfe-1538b609df14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:98c15c84-ed02-5147-ae25-7c6406ba01a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:9b9d0ae5-1773-50ed-9c01-1bae678abc34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e1294227-9dd1-58a2-86c0-ed996077a2cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2ee94682-bf37-5a80-98ad-67728ff3d78b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:7bc0fe53-5b03-5052-9275-96a990794624", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:954a819b-6f02-56b4-bdd2-9247d17bbb51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:2640941a-3710-51b4-a360-b4d38d1142ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0efbd273-470b-5e08-8a27-a0967fa7b01b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:0b752bf9-937e-54bd-85ba-bb1ebe2c6218", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:6b32e1b9-59d5-55ee-aa37-b4dca4c33205", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:24350111-bb97-56dd-ace2-d1859d37ad5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:23aa7645-5e34-5ba3-8fed-e19c199a6c31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:8fdecc54-0baf-5596-bc90-7186cc1ecd5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:93441c35-6db4-5000-bb4f-ca647554b053", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:96ccc104-d4de-5923-ae77-dbe51bac0413", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:49cd581b-2b6e-5c78-b6a5-eb3407a9c4b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:04cc66e5-cac7-5a32-ac26-2db1563a0416", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:d3d0a344-0124-5d55-ac76-1cbca755d2df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e46ec167-4bec-584b-974b-317013ea33fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ], "bom-ref": "urn:uuid:e0db6c72-dde5-5fcf-ad6c-c38ef9ec348c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.19-tuxcare.1 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.19-tuxcare.1" } ] }