{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:95895501-f2e3-56b5-bece-2ff469db45f8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1", "version": "5.3.13-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1b035818-ca17-558a-ad6d-b298a781c725", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:96c59cb9-40aa-5aad-b5dd-1e1e29acb80f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:02a9321d-2a16-5cc6-976a-fe763d233ce9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:6a950dd5-17d9-5d76-870d-099e03f00dca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e70e9098-4087-5294-b922-8d10ba5d51c2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:7b62e95a-c32f-5aa9-aadf-c267fb851366", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e7af6020-200c-53a5-9c8f-96af5448d71c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20860", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:6574808c-9cf6-5a46-861e-2da49fa32847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:019c3ae6-297d-5240-8c73-d6a21c8c88f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:ff237d4f-83e6-554d-8f0a-3eb590854184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:d2aed558-ed42-5a48-b980-94c394397690", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:6adfda58-1733-5f21-bc25-89ea662b6e02", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:2bddc378-5d12-5988-83e6-1e8d900aa74f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:8457aeb1-9ba4-56ef-bd1f-00f0f91b3afe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:f1e5c07f-8672-5e44-9718-b36b4623445c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:d1b01a39-4c33-5920-bfde-e02f867a1032", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:db5a8d3a-6a65-5e2e-88fd-33e7b73aab64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:53d3428e-3737-529b-b24f-218f3035b3b8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.3.13-tuxcare.1 of org.springframework:spring-websocket. not_affected \u2014 Version 5.3.13 is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() bug in DataBinder's field matching, but version 5.3.13 does not contain the vulnerable code pattern. The CVE-2022-22968 fix (which introduced case-insensitive field matching using toLowerCase()) was never applied to this version, so the locale-dependency issue that CVE-2024-38820 fixes cannot e...", "justification": "code_not_present" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:fb64d5f5-6658-5bc9-a2d5-bee6d1359d73", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38828 does not affect version 5.3.13-tuxcare.1 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework 5.3.13 is NOT affected by CVE-2024-38828. The vulnerability was introduced by an optimization commit (gh-31834, 0970b1dc7a) on December 13, 2023, which post-dates version 5.3.13 (released November 11, 2021) by over 2 years. Version 5.3.13 properly allocates ContentCachingRequestWrapper's buffer using the contentCacheLimit parameter, never reading request.getContentLength() when...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:dcc1bd8e-259f-5f41-86d2-390cc5071919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a260a306-8018-521e-8aab-c1aab55f07e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:8749a403-0143-58f1-9423-fba595b31c0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1fd481e2-cb76-5224-95d6-166d871c88a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e96dd945-7c7a-5600-812e-4e13b605cc15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a1264c17-66f2-5d11-b8fd-dd3975599d38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:703b72ff-4adb-59a1-8934-e25e7c3c6e84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1d88e97c-df11-50a1-b9ec-d4021a35cc2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:bbbfa3ae-1c41-58e3-8387-1ffe431e9329", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:86eba4b0-7dbe-500d-80a2-2f4406e35ecc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:80c3b993-3576-57ad-b42d-e8cf4be54237", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:0ac5c7da-1bcd-5f2b-8a8d-67c4f9355752", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:04c4686b-a6ca-5f53-aed8-4bb5f63145ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:5951ad66-2efa-5e8b-8b38-b2a658125303", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1682f9d0-3312-59ed-a068-823e9514d56d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:55df30f1-46fd-58fb-a23d-3ab8ba854841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:69bbefb5-9b74-50da-80dd-cf8e349f4bff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:9386aa23-0b12-544d-a526-7fa7b3fbed66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:7f275024-f6da-5d23-808d-a308eef225b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a71a6186-267a-5abf-8138-0d0f9d0066dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:dd277abc-ec1e-5373-b9ee-2b475620ec30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:3cae1370-f592-521b-8859-a5b285d6b0e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:6a9f9f45-6b1f-5817-9a93-d4f8135d8d31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:9726d3f6-3aa5-59fe-ba82-451e65138bf0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:36c9a464-d5e1-523c-b647-9563de4b6684", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:e02a74ef-13fa-5db3-8f01-8ec16ed6b2ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:eba10615-c07d-5122-95ee-142b7d2d4190", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1b280263-933a-5cfe-8248-0521587a68ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1f01b48d-69a5-5096-bef7-ac20b7c6d52a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a8ea54a1-18bd-5a6d-a264-96280b38f508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1b4769fd-ef7e-5cc1-b38f-d8e037e7605d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:49497454-5715-54ae-b773-50715b7437ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:a6772aa7-97f3-5783-90f8-6f31d3c4be1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:76829876-c5d6-576f-bb47-707a5093d07a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:048ed9fe-acb6-524b-b855-15eb7e191d03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:5b27cd7b-8d69-5da5-a476-f7be2236dea5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:30a30c92-37fd-5e84-b6a5-569e7999b81b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:56d1f404-ea7a-58c6-ad58-e58e8f0bbbae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:78791bdd-5edc-5dde-ae1e-59e4d0f0a77e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ], "bom-ref": "urn:uuid:1d5c13f9-4bd6-5a75-80a0-11e1a98ab7f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.13-tuxcare.1 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.13-tuxcare.1" } ] }