{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3dd03bb4-96e0-5048-ab31-2900b79ebc72", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:37125eb7-284e-546f-b8d7-9093c053ec23", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a254aab4-85c7-5d3b-83c1-0ea31549acd5", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f6f36803-d9c3-585d-aeb1-1830728ea069", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ca5617f5-3a78-536b-be09-d7aaee631a49", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:aeeb3288-84d6-5109-b72f-a6b8cbf34d25", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bcf5b9d0-3e55-564b-a544-7018cb11440f", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a86c4707-8e9e-557e-a94e-ddf80cc523e6", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1716ade6-e558-5117-81c2-f1968c919413", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ea469bf1-d618-5bc4-95c5-db7f0ea5ff45", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:57a831a2-6ef4-53a0-be6f-dbf75b4dff78", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8cdfd8e1-d3a1-5914-9dc4-6d415bb3ae4b", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:92be0fe7-28ae-5018-a35d-1416736dd473", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:138a6db9-769f-57d3-baa4-ae1ea1322a05", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c47a0d2b-c516-56e9-9f48-b7412e726e22", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6c3a914a-1831-5575-86b7-92433153402f", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bf2777e2-f462-5b0c-95a2-786146c83c8d", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jms 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9f737ccd-e9ed-5dc8-8046-367329ca979d", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9626f06d-83ff-5eb2-a914-eebf2d5c3005", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb96b868-bbf8-5057-8449-521093bfe90f", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7c61afd6-51c8-5f8f-b103-f0e36920338b", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:3c9f7a4c-1567-5b06-8098-6a5e79bd5f80", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8a23cb79-6922-5fae-b491-d462273c342d", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f27d86bd-daf1-551a-a943-7d81b1b19eb5", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ec070fe1-df34-5a0d-89d2-26c0b9b808d7", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4d196910-1ade-56ce-b76b-421d50b760f6", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:970b031b-02ae-5298-9870-980e029749da", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:35550963-d2a2-52cd-bbf5-54767cf09f36", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ef711a44-c19b-52ae-a45a-b0862286a75e", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a8d0972c-c5df-5c7a-8313-35336b2948d4", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:edf773d4-567c-5553-a26a-1c84e9962459", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:675eab97-9555-5c3b-b7dd-89dee83f5161", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dc5f284a-6880-5403-bbfa-9d6e9dec293c", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4d494e7d-0f44-5493-b359-d5ba0127e430", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2aaf00f7-034d-55d3-a33b-cdb19660e3fd", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0d725bc9-7a9f-5d30-8739-2f76993f67d9", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:153b3ed4-9698-574f-9878-19f0c4b82053", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:11fe5f7f-c316-5d19-b754-27c60504c238", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b23796e7-7626-5818-9b1a-d5a3ef830c2e", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:01db5ef5-faa3-5388-bded-e6d08f4ec1b0", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c65b9a49-6f42-5190-a429-f9aa3ff3b633", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5a43e922-2bd8-57b9-af9d-e7c1561b97fb", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e3623299-48f0-56de-a654-24c5f0f34900", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a769b61f-1b82-52b8-8bbc-3f1a5a2560dc", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:50c6a33e-9c41-50f9-9bc0-96db0ce2ead0", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0d81f6cb-7676-5e0e-8917-d55f5ab5eced", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9bc72db1-d569-51db-98a6-37044470e13c", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f9581f3e-6039-5b82-ae2c-89755e30c1c8", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8587c7bb-78f8-57ce-9cb8-f33356aecf9b", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:57913013-9c9c-5cb8-bc9f-4e1fdb61a765", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:febd2121-df95-593a-b164-cca62ea91fb8", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:41a1ee8f-7ee8-50ae-bc72-f5d598338f8b", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d127002f-a4ae-54ed-bb3a-505a0e1bc582", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:dd72ecd4-fd7f-5dd2-a178-7dce140f8540", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fe79c4e9-759a-527f-ac56-540d7e1f7a32", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b0e8bb27-af4c-5cd1-b7fd-9eb221460ee5", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0b49bbf6-a9a0-5cf7-ab9d-6d7e18f2bf4d", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.20.RELEASE-tuxcare.5" } ] }