{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bfcf9fa7-719e-589d-9c91-393ea84fb206", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.3.24-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:bbf0e59d-b4a8-5495-b90c-0447a9b01791", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a85f6241-d1d6-5220-940b-e8b8a776c062", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9a2d692e-d897-5c2b-a1fb-463505d8f594", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f4bb15e0-8141-5b30-a0a7-8b20dec4cecc", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4bdc333b-4c7a-5b45-aa28-58b792a97abf", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:759b4bb8-ae75-5996-9e99-d4062342f28b", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:619b5d0a-42ae-5eaa-aab1-6597931dbf29", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:12cced53-3713-5320-8918-b287a841335f", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:af650f3b-91cb-5643-8df0-c743a833b984", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e46daa89-813e-58cc-99d2-514f12719775", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b2590a6b-1cdd-5367-8eab-e619f7a41122", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e9845bf7-8b85-59d2-983c-5ed7dababe10", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1c2d19fd-0ca8-5091-81eb-6468e53e8c96", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c61802eb-0c1c-52d0-8a11-b8ee133a58f8", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9e99f09f-a074-5e68-8a4b-c9421722fcaf", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4da12c5a-73e5-50a2-b6ea-2072e78c5855", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c70223f3-2db7-52a9-8384-92aa46813744", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6fe82005-f9b0-577c-912c-f627b108a784", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2aef4937-bf3c-5d0f-832b-812785d282d9", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:559f4f00-2589-5996-a736-48bfc6d02565", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:79228500-401f-5ad6-a748-b196f79da994", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e3f1e023-0966-592d-b06a-d6b63ba21ebb", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:af5595d8-61a5-57ff-b412-fcd4420d24ea", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f5120d7f-e3c7-5568-aeef-c686fe4e7816", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7c754bf9-2eb1-5e47-b357-76f3b1038728", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.7 of org.springframework:spring-jms. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:29922a7a-9848-57e6-92af-c43f535ae1a6", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4471773c-92f9-5728-994e-e8a9f143968f", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f0f764d9-15eb-5db2-95f8-15b8e8a22a11", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5e5a87dc-526d-5563-bf85-55972ab775d6", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7ca68a3d-d414-59d3-a137-71afb7cc059e", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f3c9988d-8783-51c2-b66f-f2c17e07ee28", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4fb484f1-f358-5a2a-87df-bfbd8361ca7f", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a8f391df-012a-504f-9661-f906f71f387d", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f067464c-ce4c-5bb7-9e50-404d33cbd49e", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bbc0cc41-77fc-5dee-92b8-605907727661", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0ebc068c-c449-5c4e-b13b-fdc55c1923d6", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:adc0d09b-9601-5ab5-b2cc-451c101ca799", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:db0db3e1-7af1-5730-971b-c2cb86a8ec2b", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d480119d-f488-54d9-abb9-98548040bf28", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:86db6e79-9edf-567c-9b80-e50fd0cccb24", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4ee18921-5a3e-57ff-8742-5f3ad2fcaae3", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:47c39e4f-8023-5a99-a9f1-40a932a7acff", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d0a41f4e-5f1a-5ccb-aa6b-35d87e7e9b0f", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c9e70791-199e-57bf-aae9-4fa86ac3c284", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2f8257d0-900d-5a31-b868-c1c2d40debea", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a1aea29c-8d60-50ce-9dc8-cb5ed99642fd", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9934af48-a858-5bef-978d-3e66afc539e3", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:635d12c8-ade4-59d5-8f70-5c9921763d8c", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d77bed51-c3e7-58b2-9392-8549d539b518", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9d2eb95f-c4d5-55b9-ba54-a05c574399c4", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6d4c6edf-3de0-575e-8dbd-896126230917", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0f05a8a1-9ccb-51a2-9f99-6efe29bf04b7", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:978ed6fc-cbc0-5400-9859-7fe5a7e49af6", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.7" } ] }