{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:11c67a12-7b19-57c9-93b3-0c9ca3e6c96a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-jms",
      "purl": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1",
      "version": "5.0.19.RELEASE-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-jms",
            "purl": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.0.19.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:974decda-9c1b-509d-aca8-9c9de12087d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2dfda5d6-8f64-5365-9b92-28ab8da2544d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fe37f4ed-a5e4-5ec8-bc25-8714e43e0577",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:402fb9fd-8a8f-5a4f-95a5-aaa9ef458921",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bbe21b88-2b82-58cd-922a-1428da373e8f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:495e9724-a62c-5ddd-b5bf-cd8239f84df9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8229d796-3982-5e11-ba0e-3ca2c809f368",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8ddfedbd-715f-5c5e-8d7e-b50e219f900d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a23b27da-b440-5fe0-8f5a-5fb439b722e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6b575a63-7c9d-5af2-94f8-d881cf1db24d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6290a380-da27-5863-9b81-aa7c34073dbd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1270",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b301790a-3cc4-5388-85b1-b139f1072224",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1270 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c77771af-e357-5e4b-9da5-85fcfc446322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7e0367d3-0b39-5cda-b0a3-25738d1a065f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1275",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e3f4120-0d47-5025-b804-98a3ac108647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1275 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8b677a4-1082-55f5-b6c9-b087314fe713",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8c57c182-23fc-586d-b983-9b8514f626ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bab69114-66e5-57d2-a13a-e4d4f30ac7cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fdc00622-65cf-587e-89a3-def9b0fcaa1a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4fa35924-ddd8-5115-af1d-0a9918bce93f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d9fc5ec6-985d-555d-a9f1-f40b2f880504",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:07ea8512-fd0e-5d86-a05c-aab4ffafc54f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ef7f01f8-2cff-5988-af8c-46c50c2aa475",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:af587a09-7a38-5a29-9e10-4c841e388b0a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0d0295a6-bfb3-5808-9813-72f00bfc0f70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6059694c-9743-5f7c-8c36-29f2256b1791",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0fbaa760-a10b-5bf8-9823-1c3fe425f0ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-jms."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jms@5.0.19.RELEASE-tuxcare.1"
    }
  ]
}