{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0d875703-8f53-50e2-acda-a7a6ad58cefe",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-messaging",
      "purl": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2",
      "version": "5.3.5-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-messaging",
            "purl": "pkg:maven/org.springframework/spring-messaging@5.3.5",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a626545-f320-5637-b75a-26680828b2cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3c0cb7e5-1f63-56d0-a6c9-8f5e8aa7be58",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2d7bbc56-bc5f-57e2-bdef-14ebb7934215",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f9a9d13a-83a7-552d-ae30-fd3263f0d3fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c9e5fead-df97-5ca8-8c97-ea63d100f9b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4105f7ab-bf7d-5dc5-9eca-d1a8bf45d114",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:af959073-529d-5c76-ace9-24158af8917f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:07ca9910-8ddb-50d9-bf1d-9ee31971ce01",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:75c740b8-e2c1-5943-9b94-aeaa4f1ddee6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1d17ca3c-398a-567e-a5a4-fcdc855795d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:77522634-2a93-561d-8945-2d5d41a3415b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1270",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b6056bb2-6c4c-5ab1-9183-ab7b01599bda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1270 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd284790-577d-5ca8-84ea-2285063fb2ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bb366578-7126-52b4-bb0e-a1d145b3d4f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1275",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:18e157e2-4aa3-5218-9348-6b2dc7efe89c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1275 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:80e12f0c-3a8e-5776-b6c7-04155b72709e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8fc36965-ffdc-5d1a-9024-2356a2befded",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da1ef2e4-98b8-5862-9a23-dd391e3fc8ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a9634b5d-f06c-5393-b23d-1acbbc1e0e92",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da4402c2-3821-5e64-89bf-cba97da4184b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c91daf1-1dbd-5f91-8b98-eaac30498517",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22971 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c49624c-883b-50bf-8254-31fa0a1d1648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5b48d7da-1c89-5837-bcb0-5c05a621384c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:adeb9841-81b0-5004-a4a9-844719d7bbe3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:21b2dfaf-12e9-5f8d-9ef4-d7b0fe047a26",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e799ed12-116d-51b6-9db1-a9ce3ec243c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.5-tuxcare.2 of org.springframework:spring-messaging."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@5.3.5-tuxcare.2"
    }
  ]
}