{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f234981c-7b20-588b-9e83-dbac646097f0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-messaging",
      "purl": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2",
      "version": "5.3.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-messaging",
            "purl": "pkg:maven/org.springframework/spring-messaging@5.3.6",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:64f6fd89-7518-5327-a307-3406cca63170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3820de70-31ec-5a74-9614-30c25966aa9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49536c88-fdcf-5ee0-8e2d-e5712c6c9975",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:63f12ec4-8f54-5236-834e-16279121a93a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bc390512-f4d5-5ab9-a389-bcadd4e2df8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:631ce122-f329-5119-8ef8-ae3db49a6b1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bcf38e5c-541a-581e-b970-ec37d6ee08ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b9764474-1ab2-57f7-8b57-7d9edb4e6822",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c017b459-c070-56bf-bfcf-322cfb3924c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bca72a86-63a7-5ef9-982c-bb03e3e5e3d0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4f4f899b-98af-5280-a3eb-125209e9ee15",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1270",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3025ff66-a796-5e5a-8684-f8b4d4d2826f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1270 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0dfddee7-4d60-5505-a60d-211a9d789652",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:aac9a171-5701-53a6-a2a5-e095242538c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-1275",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f103611f-96e4-5665-bc68-7e20eb0029b8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1275 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5c9b7ffb-6133-51d5-a07b-15969ab11dfb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2e2d5ea7-af17-5aaf-a879-69af0a12f5a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8626a08f-2249-53a4-924d-dfa15c309e74",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7e1b69e5-5189-503c-93b2-578f8e9b4898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:17ac5f1c-d2f4-51a7-b33d-108765f5cab6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2022-22971",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ca08f642-dcf9-548e-ab96-dc7165f8b632",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22971 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ecc945d-1780-547b-bfc6-63f1f6855e29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b634ad6-39be-5784-9c5c-4f65196d0dcc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b3a6d8ab-33b1-5923-845f-bcb4db28130e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:243626c6-241f-5b2f-8aaf-ec44749d4f87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d2ef6269-1a60-53c5-ae7b-7c93d220a61a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.6-tuxcare.2 of org.springframework:spring-messaging."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@5.3.6-tuxcare.2"
    }
  ]
}