{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2a837ecb-ba3d-5249-af5a-2c69037dd55e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6", "version": "6.1.4-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ca1d00a6-0885-50e4-8006-9a1967186fb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e1d6b5f5-aab7-5b1d-89b2-4e304571be8b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:abad7692-5f03-5c3d-990e-94fc589b9a4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f163ab09-d130-5f75-be3c-0c60e6feec33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:2879a3e5-6e94-5458-a3a7-280f7d569b17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:56bc561f-9f14-5eb7-bc96-7642aacc700e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:62712e27-3ec3-58ae-bf46-73de7e75fb40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3446ad79-0a6c-5a20-8139-5ff977547e3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:37c58f1b-65dd-51c7-9b8e-96eb822a2fb7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a0a52850-0446-5e23-a740-69cacaee13d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f73d81f7-c4fe-539d-9623-79978789bf92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d3da690e-a1ad-5c92-a855-71921bd529dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ce62e057-f3e4-58b4-adcd-c5cdc1a3dd33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d9d82df1-d305-594e-92e1-771b58d71637", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:387acd62-f1b7-5810-8482-1e9e02d0c3cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:546d5108-a0cd-5273-9457-40c282ab6581", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6325932d-d462-555b-bcc8-0ec491d5b004", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:140a079b-93c0-5bf3-bfc7-13762f6e1b90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:12d8e075-d419-5880-a7ea-b79d0eb96e71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:51df4594-29a9-53e0-be6b-2aeb14bbd06a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6a686cd6-e667-59db-9e71-ed5d795bf095", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:af76a48d-3c4d-584c-af64-45f72d9d3eed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:704bf0b8-1546-5580-bd58-a6cda233f6fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5b4d18d5-e4f8-5788-b40c-5824042effd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ee30f545-ac35-5aff-8542-781f2b5487d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6a97a78c-f91a-59ba-b15b-6afc0973c188", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5b7dd786-85ea-5197-bb57-91703f7ebfb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:26efac0d-8254-5a59-a99a-58c5b0207020", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fba5191e-da00-59a5-8062-6aa7229e2d3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1f12d1d9-96e0-5842-95df-120d6b098702", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:bdf99ff7-7dba-55e6-a332-262e26b23287", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:90754aec-9432-5349-b60e-ee419f99a444", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:278c18b6-04e5-5160-ba2f-87caf8da5d4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b2502950-1857-5bd5-b45f-5394536d82a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:631e4925-dc5b-5c03-a96a-42c59648c5c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:90366d27-d568-5d1a-b3be-51272adbd146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:38db7755-59b9-5070-8a65-c9095681c3ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:32a00dd3-2322-5f3d-883d-89bff672e3b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:788aa455-dbd6-5ec3-a8cd-ee19e1d65b1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b89792d0-f5b2-5cb7-a02d-31254bae4e2c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:368ab392-9423-585c-b53b-6cd2bfbe73aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:24627d3c-8880-500d-9da7-246f6d9f8ace", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1f85f91f-8d0b-5315-9304-6beeac1c472f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:6de4637c-79ba-526f-b16b-525884cc4741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d21d1d57-677c-5316-8e19-072dd805d458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e729da8f-b3f8-5868-ba23-687caf5bc5bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.4-tuxcare.6" } ] }