{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9f35cfa3-fa30-535d-8476-731e679c8e14",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-jms",
      "purl": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2",
      "version": "5.3.3-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-jms",
            "purl": "pkg:maven/org.springframework/spring-jms@5.3.3",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:152ddfab-d46d-54f1-b2f9-b169a174c175",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dd6eb94c-22f4-5616-813d-94b6819e097d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ac5b338-e1f2-53a3-ba8a-11ac73981da5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b357eff-4733-569a-9481-6d705b5f75fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b2148fc-ec54-53ca-99f6-b62413d28606",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5d467e2b-8825-518f-85bd-ae126ad34675",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f62a8d98-721a-5647-a36a-8ddff9484f26",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:00064a79-7519-538a-91e3-e5518b758b48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:72790b80-aa67-5f94-b20d-d9c84f4227d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6655e04d-37f7-543e-9020-cbc5a2e8eefc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ea1edcb3-66ea-5143-97d2-940a0d33588e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1270",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:115bc237-5fff-5224-9847-831b72f53b00",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1270 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9e8dd3f8-0a8f-5a90-8efb-94c2be11e5d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b8787447-fede-54f5-b846-214a3be4a46b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-1275",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:57dd29d8-151f-539f-9b3b-769b336db517",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1275 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:caecb1ce-eb73-5794-8e5d-0f97238aca4e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9baa32a1-062a-50e7-8845-4261d22ef553",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f4ab8be-35ab-5c48-b577-0fa1ef966c02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:95e438f7-2ec1-519f-8e31-d45f8d82eb79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:18c6adeb-2f02-5102-821e-31cdf3042c60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ea65d09f-fd4c-5a98-975b-c02a55422954",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22971 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b72999bb-34f8-5600-a7a8-61f983ff08a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:71013231-0ebe-5c31-a158-b33c00037f61",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b3c24b79-a828-5338-b2cd-7c40619607e1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e973ccc8-acd0-5fc8-8890-cd7b54de1435",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6dfc2aea-add4-5be1-9c64-dcff6540da0b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a7c91190-8001-52aa-adaa-7b90339b783d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.3-tuxcare.2 of org.springframework:spring-jms."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jms@5.3.3-tuxcare.2"
    }
  ]
}