{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:301db625-08c9-5e4d-9cea-17c47a7f1075", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.3.39-tuxcare.23", "purl": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b8db0493-18e9-53c6-8baf-5452fb1b0624", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:8c0fad8f-5bdd-52ee-bea1-1afb11d04141", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.23 of org.springframework:spring-jms. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:9770cc84-515f-5f68-ad9a-c65f987483fb", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:44758d55-2d3f-5530-adf7-039516953b34", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:eb7c036b-b6ee-536b-9734-f4e0a8a4a91c", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:d01f6937-89e9-51a7-a915-6c274781ecf3", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:0bdd78d0-574b-5554-831e-41d0661b92a0", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:addde637-de62-58b3-adbe-88ca0fb6fd6d", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-jms 5.3.39-tuxcare.23." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:a90d980c-c61f-5584-abfd-6f40cb632470", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3653ceeb-0e4d-536b-9ddc-ca26dd6edcf6", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7ec2a117-f607-5976-86de-683ce937a451", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:da78f8b9-74cb-5632-979e-a50d4d830a88", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:aef5868b-dc79-53a2-baed-9872fec7ca07", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:d5a5784e-0d27-5b6a-958c-f683ce00be8a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:985b3731-f576-5fb4-be49-ec152eb4565c", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:f13ca0b7-ed83-5649-aa58-2e303317e8bb", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:54b1bd07-c03c-5d04-a0e9-2b41098f7dab", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:76f7a750-d2cd-51f2-9d51-d875e88f8d27", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b8181594-e5ad-54d0-b556-31a5e112427a", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3b8617c3-ecc4-58d3-b5e5-3030ab29a312", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b00bec85-76b9-54c5-b1cc-11643031a558", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:a7a6a01a-06c6-545d-944d-9f47c8b6f4dc", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:64a14eb1-0800-5662-8e34-cef65397e8df", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:12822f37-7bd3-55a0-8ae7-de714f2c2f5c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7d33ceae-5d1f-5fe5-a7d6-5367aefac8d0", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:02a5c37f-27aa-555e-abb7-5388ffacabd8", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:07113f77-3df8-5a66-aaa0-3049384e70a2", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:4bef76c4-2954-5feb-b3cc-45bc32c834f5", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:f8d76c71-111e-5012-bd04-78e2fec45590", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b5c43b31-d5f3-5efa-8059-78a038493618", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b7b2bcfa-6e1a-56db-ac1a-d4a4d0ca7452", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:05b0b69f-35a7-521c-98e0-0dd78d686809", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:9f345afe-0aa4-50c8-8c7e-88556b92005c", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:096e00db-05f3-52b2-9a0c-5bcefeb9684e", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:ed5400e8-4c87-574a-9e64-043c3c2ec68f", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:dac159f5-e42f-5378-b8a0-588199478d03", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:6cab58ae-77ef-5bd4-92d7-43057cfc3ea8", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:96fcbf7f-57ac-5d52-a708-3da2d22eacd8", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:862aa3ea-ace4-5bc2-83fd-18bed4da8ae6", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:827f0f62-6198-54db-8afa-c9204f5f6cc4", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:e8b078ac-70a1-5005-ba28-8f28587f19dc", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:2f924f0c-6065-5209-a897-a65b93789d99", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:9cec2eaf-9de8-5af4-9a64-16506b0c1e48", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:fa22236d-3759-57f5-997f-96375add6c73", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:1f9ee030-f087-5d0c-b6c4-b561ebeda5e4", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7017e7d5-a166-58c7-8c06-15deadd0731d", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:98ef4328-b9ff-5cc6-9aa5-4f0eb1bd32ee", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.39-tuxcare.23" } ] }