{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e73c507c-6df2-5ea4-a845-13b268fb15d5", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21", "type": "library", "group": "org.springframework", "name": "spring-messaging", "version": "5.3.39-tuxcare.21", "purl": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:37aa8ec7-dc29-5863-8ba5-aceb7ab81cc8", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0790fe96-6814-528d-8776-918db42c1dac", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.21 of org.springframework:spring-messaging. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:79dbcde9-1820-5e12-ae2c-7cd0f4718c51", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:eaf77083-3fe9-5e94-ae20-3dcc0ea3227a", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:3def1a06-cd45-5374-9020-96cbe9910e5b", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a919c3ce-00b5-52f3-8d1b-859560b4803d", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7f349785-2cbc-59fa-9c6c-d6347e9b9d8d", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f047088d-0d50-56b3-8279-d47f8bce2fd1", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-messaging 5.3.39-tuxcare.21." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0422b628-d032-559f-be4d-33c3e39bab46", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4c688714-c774-5ceb-9aa1-509a7a977bb0", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f5a63739-67e8-5fa9-818e-20e1ffaf58a8", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:82562375-dc19-592e-8149-576356ea4b22", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:45147f22-bed9-5fee-b909-3992d074f5c9", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c1fd6bcb-0d3f-5213-8fc7-b05e00eade15", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:69996d45-ee71-5f44-8785-f21563b78214", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ef9eb302-a438-5811-8a58-780180fca108", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:dd512261-9808-59ea-a380-f386cfb2e210", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:6942cd31-90b5-5359-ac93-6befb4c123db", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ac2d2754-0f30-5cd9-8681-c2c6dc843842", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:aefad50f-2cff-5ee1-af9a-5b4793eb210c", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d05f7cd7-3d17-5bb6-b55f-340cd1dd4260", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f9c4b176-0783-5572-b5be-b56534ffc727", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:df7b0ce2-f18e-56a9-bf84-c6eb547c3943", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:682becf7-274e-5873-989e-ca364e475f5c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:63f2b773-ad3e-5cce-9b87-c4e289f01b6b", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:6a201e5c-e1ee-506f-8be9-91b03f26fcf9", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:263feea0-ea7c-58e5-9e51-c6fd0bd8f3bb", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:11d6ff31-e65c-5c56-b287-490ceea46771", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5c5fa2f0-e921-5c8b-9b8d-c558d2ce5a89", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c1d2961f-0377-59b4-8d0d-7b3d475fe2da", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:52f0d7f5-2633-5a5d-9893-60c73d5acf30", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:fb8dedbb-bb20-5994-a626-cac2373c35d1", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:288f6236-a7fd-51d6-b1ce-bcc5bcf6db14", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:683ebe5a-4227-5270-aa12-5c90975d9de4", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4f30e951-992f-5288-8ef6-aaab2e5fd9a3", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e0a8e80f-04ae-5775-b57f-ead7cadc8442", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c2a7af0d-3054-54e3-922b-ec1bee52c826", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:9319aead-6a2b-5c20-8cf2-6f6a020c243f", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7b6ca474-0958-5fe5-bdb9-d16d31ad9b95", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d8e579b5-2ee3-55bd-be38-fca63ef171c6", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4f0ea9c7-a766-55d1-829d-4c64ed15c55d", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:155edb36-1596-5587-9e20-a00346b741f4", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ab044568-df9f-5814-a43e-28ff06cd4a93", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:75ed8ecd-80ea-5c65-89e1-0b3d090534d2", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c4832aaf-bcc2-5bb7-bbc3-db123922b8c3", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:53658f48-f79b-5b50-a41d-9995d2d23711", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:6564baeb-60b0-5a14-945d-f917273a160a", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.21 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.39-tuxcare.21" } ] }