{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f53d06ed-60ff-5454-b4e9-f71168f8ac61",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-messaging",
      "purl": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1",
      "version": "5.3.23-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-messaging",
            "purl": "pkg:maven/org.springframework/spring-messaging@5.3.23",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.23"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1bec0b00-1be2-55a1-9275-caa847df0eb0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b5d20014-a8f3-589e-a776-538ba20f497e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2680a1a7-397b-560a-9d80-0cc08b677b25",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bfa0a2ce-cfee-5296-9d99-726e4355f158",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d73d75d3-96e9-5573-b6e5-69ddaf3bab2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74ba8090-3586-5da2-8d83-799bf97f0e6e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f744175f-34d1-5d81-95dc-49f7158c0625",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cb9b6b4d-5e84-5521-89b7-01beefc509b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dddadb02-3725-5b10-83aa-8ace6655270f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:293491c1-2f97-5660-827e-1feeadeb6dcb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:68a1ec97-15bd-5940-bb59-14e5d4a2975f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1270",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bf4158b4-c526-529d-b347-e2ef64c8215a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1270 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:76e4a598-5a17-51d2-8041-1d150b0a8300",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3994c1fe-9728-5736-b6a8-3cab97282586",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1275",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:969ba207-6a93-5039-b84d-3709f9e80dd1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1275 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2dc270b2-592b-5540-a0f4-0011ec9037e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1a2a97d1-955d-5970-93cd-1089b5e93a9d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ce03b6f5-7ecb-5f4e-9f68-23f2d5ca07a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0623329d-ec7b-5402-a47a-7bf40791f99b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:71815f81-4a23-5c53-8568-10f8d9453ef1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d460f329-4e2d-5e28-a10d-50de31a2bf77",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22971 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:96d16cab-3eef-5a10-b5ce-d0e997092e35",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d08bd8cb-d524-525e-9b10-a11d4eeed2b3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e5b9ce48-770f-5718-895a-ca73417ad7dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.23-tuxcare.1 of org.springframework:spring-messaging, and is fixed in 5.3.23-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a21275ae-dd54-5e77-ba05-29eb30efbb19",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63db62ee-90d6-57f7-8ac7-836a72cb195a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-messaging."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@5.3.23-tuxcare.1"
    }
  ]
}