{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2d68643c-c112-5ace-9c6d-07a8d415ab27",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-messaging",
      "purl": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1",
      "version": "5.3.5-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-messaging",
            "purl": "pkg:maven/org.springframework/spring-messaging@5.3.5",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:17141c48-ea0c-5233-abda-b3df9de9b7a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ce4b97ed-bf14-547d-9030-dcd38cfb1f04",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:53756899-8c99-5f8e-9c2f-8d4e7bc5913b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8692728-ecba-599d-9594-82d01c8d8112",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c201f20e-1dea-54cb-b887-38920a9d8104",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1b2c7f30-0927-5fef-988c-086f8d5098c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d2af63c0-e735-5aa1-b7a4-e675d3cd19a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:75202fb4-1f32-53b5-b2c4-e3b5e543947e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0d8577b8-8db7-558f-bfbe-af9653c48fff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8d05b074-f61f-59d5-aa44-ba86a7cf6a25",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:88289a50-263e-54a4-8cb8-0ebcff38b8cf",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1270",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6dfd34bd-0ae0-543a-9854-077dd3202486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1270 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:88f2e42e-9a55-5992-939d-244019a1170e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4df8e2f7-fe4b-59b6-9a18-55e42ab2ffd0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1275",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c35e44e9-871c-58c1-bd1b-d21880367f29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1275 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aea98e26-3454-56c9-82a4-158b371c97f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1e3b6c03-d7b5-55bc-80e9-f14d0d93f7d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c75a0323-0bd3-54c0-ac71-63c95997e34e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ecf0d935-d98e-5acf-b443-b997938d7120",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f81e34e4-a2e0-5411-8c4e-1ceda0508d48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9d0182d8-dbe1-5609-9849-1aaa491d5ad0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22971 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:37a9b55e-5faf-5606-a6ce-4a6c58159a46",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e427c8ee-6c31-54ca-afc6-b88a5d937d22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a57d92e0-eb82-519c-8451-fd4278d82f27",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:06462a6f-f7a6-5f85-94a5-e6d88777a92e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7e53b6b4-9dd7-51f4-918c-543e6f9ace89",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.5-tuxcare.1 of org.springframework:spring-messaging."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.1"
    }
  ]
}