{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8171aead-8190-50e5-9732-4378cd643b6c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4", "version": "6.0.0-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:30670940-67a0-58d9-9704-f0d1b7225de1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:721d5a18-f504-5c66-b893-37aa1bff7f2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6abdc634-0c6e-52f0-80d2-4db1284bdce5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ac9ce967-c0ee-55fb-827a-351e8af81d79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4b9af32a-785e-5ed1-be97-91d08eb045d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b7ae09ad-2261-574e-a763-47e033182ae0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:1a4d7fde-c906-5d70-9dd8-51379c4ec125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:3b97a961-ffaf-5373-a9d1-2cb3e2c97ab7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:a7ba484b-7d75-531b-897d-ae07cc596fb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0f5c5852-0a79-50f3-9714-1350d211d5e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:260d0d83-bb76-571c-ad8f-80005e30d190", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b3984fd6-eda8-5d7b-af2f-5354f9332000", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:80441c8b-cd6e-5a44-ab63-561d0145984d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d480e9fe-cde6-5379-a49b-72b4d01df82a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0a57aa52-adb4-58a8-a9d7-655ec8b5a2d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0d6f9083-9b37-5a51-9ce2-be9b5fb1f041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:22a07550-cd0a-5ee5-b131-0ce3b84ef855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:54d17645-7161-53ef-a2a2-cc690f4690a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:9c3372b5-a5d3-5a49-8567-e577b2c464dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:99a128d9-2a38-5479-b01d-24d0093e82b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:0a39e056-963f-5cbc-b66b-6cefeb482888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d4e0957b-e09e-5ed4-ba66-d3379496754e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ed74d0e2-b4ce-528a-8ed8-72b9b920cb37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:2e169e9c-ba3d-550d-a243-d6a9761de517", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:c529ca3f-647d-5ea5-af10-a7d9f01c963b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:459647e3-baf7-5c74-ab98-c0470e37bdef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:34e70f20-a939-57e7-b114-dda21ebe1533", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ecce4b52-5413-55c4-881c-5f0dfea5606e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:fba737e2-bcaf-5341-8caf-b36a3b496c7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:8c92cd8b-7879-55b6-88c2-c88b521a020d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:ac0255d0-07be-5889-a133-c1e312c0b5d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7254730c-ac49-5cff-a8dc-5c8c5c1ea822", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:b6aeb89a-ae09-5380-8f57-4de232cac4d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:39d49d67-8882-504b-835e-13b8128cc304", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:931b548a-07f6-51ae-a145-87440d39348b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5d41baec-503a-54e2-945c-b972c0033eac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:d1ba6f0d-bd44-521f-aa98-a81c8dacb943", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:618d4887-5658-5bd6-b10c-790e804f1e25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5e37c2c8-bca0-5d00-b850-88802944c380", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:534e24f4-d336-55fb-aba7-aead818dcab7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:5e9c04c0-bf56-5fd4-b773-e777397628eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6905a66e-809c-515a-aa38-b138f51f03dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:dd5a2ac9-2995-58ec-878b-1f547df70cb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:7b033bac-288d-5371-8f9a-75879168804c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:4c3456b2-5416-57e1-87f1-5bb156857435", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e3294583-2b9a-5c97-a960-17f6b2c46f7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:e46664c4-e22f-56be-96cd-038409a63cc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ], "bom-ref": "urn:uuid:6d177374-8549-5971-a248-47cc81d58912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.4 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.0.0-tuxcare.4" } ] }