{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:53a54936-4093-52cb-bcbd-d7479cbc6104", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.3.24-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:ddb2c7eb-b3ee-5347-9c88-dfd99711b45f", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:290139f3-278f-5a49-bafd-d8fafd3311e0", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8e8e9502-ab86-5904-a46d-2a8453929c0c", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:37b5eca9-f2a3-5dd3-928e-450e2ace4760", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6d1ddc85-e65a-580c-9fe3-f8041291b9e7", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ad9af205-88f9-5d22-beee-8dcc2c19a9ae", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ac4657f4-6de5-5bd3-b1f7-cb20ef3ec0b7", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b29a7b77-b169-56e1-8bd5-13ccf4964149", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:090327f6-5f9e-55dc-bf4a-563583506ea8", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f8983794-71de-50b9-ab4e-17fe3bd59a14", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c1bba7fe-2733-5cf1-b29f-917aaea091de", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cfd7898b-7459-538a-9ff3-b828b3a9c4c4", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8204a736-e93a-5c74-b935-cadb38cf40be", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:033a669e-7a51-59a7-8c14-f7ea554c1ebe", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6d5fab08-0227-56dd-b71a-564c5d5be432", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:215a2644-3016-5a79-91d3-c80a7205ba03", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ebc71ae2-adfc-5524-a4c7-8867bda35670", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d6c560db-c9a2-57f7-946f-910ac25ef737", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:57b8073e-0869-506f-935e-5d3b34dbef3f", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2d4ae0eb-9c58-5d64-958d-2c1c294b04e5", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:334ae375-a864-5f83-9672-884d1989b784", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bf8b0862-bf07-519c-8adc-5a9368953d75", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d4135996-4868-5673-a65b-2cd8a8483b0a", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:582775c0-6f60-5e1f-9dae-5b753feb2bb8", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7807be2f-311f-5e89-abb0-399eeca42372", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring-jms. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:63f0da04-19c9-54cc-9d74-c0f8a8bfa21b", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:00873a05-44df-532e-8fe8-199fb6814bc1", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:81dcead1-40a4-53b4-ac56-3958da787ec0", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ef8f3c6f-9f46-5e9f-a927-7940e3e19695", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c3c545a2-a1bf-5fad-8929-89a9009ca3ff", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:05d0fa6c-a137-58f7-9ae9-f911c1178e2b", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4acecac9-9dbb-5f51-8f17-53cbfa87566b", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a407ede7-4a2c-52fe-8273-cd8155c4f0eb", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:afbf92e3-f27f-5f96-9082-e0fef23457a5", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ca57019c-29a7-5fc7-ad9b-4f30a72cae64", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7ea74eee-42bd-53ff-a02e-f1942b4c98ad", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4499e7b0-4da8-5dfa-b338-535fe83b6b41", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:23a0a4db-b589-5083-b334-7bc90a6806c1", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c01b7f8a-2553-5e11-807d-1edcd9144b33", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:15313687-f3c7-598a-8656-ad4f278e1439", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b2c42bbe-1c42-590c-b0da-3d362eab73a3", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e939f56c-f41f-5903-8186-132540077685", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:517711e6-024b-5fe5-95a4-40eeb01b6d97", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bda756ab-e2dc-5364-aba1-0a2b4154226f", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:099653be-072a-5bc7-8bd2-622d5abb49bc", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a2fdd75e-4635-5457-bcb1-36af1bee3534", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:781a1a67-a56f-5f48-bce8-51270db58e3a", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:32cf4c6a-c348-53ce-8950-2875bd3f252a", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0bfbf3fe-33ca-55bd-b53c-73bc4a6bb926", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:da132818-ce8b-5e52-959e-3a511ba2904d", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9e76e3dd-135d-5861-ac3b-85ab3b708dc4", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7aba3cb8-1e42-58fa-8684-ca063ee8ec29", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:61a35960-8c7d-5ac4-a26f-ac0c1941beed", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.24-tuxcare.8" } ] }