{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8766fab1-426d-5000-8f3d-fd3fe65ad135", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.3.30-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:49a881b9-6907-5c99-98f1-6decae2a58da", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4b97a0ba-2678-5977-b8d6-86351a44d509", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c23bead6-7eab-584f-ac8b-8c49e028e318", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f072fe75-f9d6-538b-96cf-96ce452df523", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:24221aea-d48c-54bb-8b3e-8cbdc2d96e8a", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:13df2ec7-20c1-5aec-820a-31a93b8d3824", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2894cb75-740a-533b-ad5d-e97828be7378", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:753b0eff-6445-5729-aba6-4f33e651ee83", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e17b042f-1bf4-59db-a072-551ac78ec084", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:11401f49-b5ab-55ad-8e4c-4ec7f9c6740c", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e04e52e1-2310-56e2-835e-18424d194d61", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:60270d29-7038-5212-ab59-1bc9f3f516de", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2021e646-21c6-56ed-8e59-6d8009626b2e", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7909f562-5c52-509a-ab5f-1810036aee7f", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5e9457ce-3173-5afc-aa61-ed0f8a58ebf8", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e0e37d2f-22d1-5492-bdf8-6eee0f0be94d", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:94cb97e0-3026-5c16-a461-abca5321b5af", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9f0c9b0c-d728-5206-980a-755f0c0dd2f6", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c0167ce6-4c02-5f82-b68c-27b7566d7113", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d96a37f8-131a-5a87-b77a-268a37206231", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a5456adc-0883-5fc9-812b-8a0084e21fd6", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fac23e9a-5497-5382-85bb-2884d7db9ebf", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.9 of org.springframework:spring-jms. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:95feb07f-0257-553a-9293-d5225158effc", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:892b4f9e-1ef5-5db8-8f68-37c3b6ffef57", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:678707e8-dc8c-58b2-a715-a5433cd54006", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:12e64a80-94cc-5abb-9822-41c9589f9d91", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:861d5fd2-1e88-51d1-9107-4ac59a9e1b9d", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8ad8cdbe-f42d-5cc5-af99-ae23b4d3ea74", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7e93bd74-742d-56f6-8c61-c13222b77e85", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:92517a0c-e1a9-57df-8b60-b5de49c7a978", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:db362a8f-7d99-5564-8520-9a4bf0f7f4b2", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c8335c95-6e73-51a5-ad33-0cdb9548e2a6", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2e5d96c6-ba38-5c53-9a24-115173891598", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9aee4053-38bc-52e0-a60e-dbe2925cec5d", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f56cc109-9fae-54c1-b4a7-76844360e3ad", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:101715d8-0673-5616-b57f-9c675bfc3cbb", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:67805591-fdfe-519c-b70c-21eb570eee52", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:34307355-678c-557a-b745-53588432726a", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d0b3e68b-68a1-5a9f-a6f3-d38b27d1caa6", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:88f43fb2-26e8-58f0-9962-3e3f249f1fda", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:73d050a5-3312-5cbf-86ef-95b24e3de513", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bc4b1fd9-821b-5d75-ac94-a1bff3fa9bfa", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f1667851-b1ce-5663-9d7d-aa8fd42cc84e", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ca777b51-0d21-518b-8a6f-40db5f06c98d", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:27ee18a7-587d-5246-95f9-c1a1c6eff1f8", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:14152e8d-11b1-5ae2-be12-f8eff9cc3d8b", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:718e7d10-236d-5d44-8845-6a960d9f0449", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:beee6752-3dc4-51d4-a4b5-901e278615e8", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:22532558-511c-5b02-9e88-ac346c5dfec6", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:98812aaa-8f1f-5c9f-a564-47ddac6b5509", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.9 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.9" } ] }