{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:29ed39a2-d8bd-51b4-8630-815d297938d0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-jms",
      "purl": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3",
      "version": "5.3.20-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-jms",
            "purl": "pkg:maven/org.springframework/spring-jms@5.3.20",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.20"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8dd4f2a0-ae72-5cdb-8b9b-a2862b25939c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cc18365c-556e-5001-9d0e-d7295fb936da",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7d3855bb-2bc0-525d-8a71-ab520a5084eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:734b5ed3-d478-564d-9098-7156f384066d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:32ce4be0-3087-5155-b1e1-2e9ec96e7bf2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d7a8eae4-2bcd-5069-921c-8351bc02dde3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:77868950-3d51-5433-8260-3d9747eef4fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d5fbc79a-c2d0-5e4a-a4ea-f215b6b29c8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:42d5a993-50a1-502d-87dd-32b38681ae62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:95c929de-bdb7-57a1-9396-208eb0e336d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:12ff7618-e8ef-5c50-9fde-59c382810a8c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1270",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04cc26ff-603b-50dd-83b1-329f914a4263",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1270 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e049df2c-7579-585a-9868-c33f7169d28b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6ec64b21-4107-5d6c-96a3-e509af76a823",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1275",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c37e9ab1-5aa5-5cdb-9f69-c5e2636fa98b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1275 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cb9983d6-9a6d-549b-af75-c735d25aac5c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:571feca7-050e-5780-9c0e-39ad2d85851c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:02f61749-b006-57c4-8cf8-62d2a72ebb02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e2e5d768-568e-5ad4-b6bf-237f9989c4d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:61e042dc-ea33-568e-ade8-f4aa7cc1ba38",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:16a81d28-7264-585c-87bf-634be4c0f686",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22971 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:924a0802-f9de-58b8-b7e5-b9d44cfe1bf4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fbd7df1d-90b9-56a8-95e9-fcc00e3196f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7e38560a-3106-5d7b-acfa-cc848feaa070",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:262de4c0-cded-5336-a8e4-1b2ef9fb9a3e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04cfbfbe-8542-51ef-b43b-4940b86fd63c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6a8ae282-5257-535f-8573-b6ee6503fb40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.3 of org.springframework:spring-jms."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.3"
    }
  ]
}