{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8528fa28-5409-52f3-8b52-c41fef467c64",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-messaging",
      "version": "6.0.12-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:42aeebfa-0703-5ece-a337-8c0234dccef2",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5226feab-1bc4-56d7-8ad8-b262fc10cce5",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b2d070f-7503-519b-97e0-9a1f6279b863",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cf7db26-fed0-5892-965d-31991b514f08",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0411c252-354e-5a7e-848f-cf22a7282a68",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae6dcef5-3a10-5955-999a-cf0df8546752",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05442f8b-9416-55eb-ad01-ecd55b40ce26",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a390321-b9e9-5ee5-b3a5-36f80afaf6df",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a848f194-5730-50ae-bcf8-afe73d28243f",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c725b86a-84f3-5b58-ad72-57d01e6a3fa4",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d8c182e-4c8c-5f26-98fa-cd6fbb2b7d40",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c471c76-9dad-5214-8aac-235fe51e8acb",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df3fc44d-2b71-5449-b1d8-cba3a4a82ccc",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfe87c2c-9b69-5d5a-b934-258b4326cd15",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80a26113-7f9b-5ee0-a8d6-fb4c05ab2597",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e72bf33-8196-5c82-9498-006d50868fff",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcc291ea-2c5b-55d5-91ba-a7cb9e931311",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5032cdd-c5e6-5070-8436-bdf230d72007",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d5cfd9f-fcf8-59f7-adc0-fb629be22f9e",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f74f91f5-28f3-5ac2-ac7e-30178df83155",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.3 of org.springframework:spring-messaging. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:701d77fe-3a2c-54d7-a779-62ca5485a472",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1cad236-26ae-56c1-8ef3-3c8c28ab19f9",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33255114-c432-5f91-bd03-4903d08f6857",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:142a1a92-0544-5b68-b2b4-ed9ac6b635f7",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9128dcc-142b-5d2b-9ff4-c9fb3967e238",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:107e14c2-2b00-5207-bcfd-580442757fbc",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a05c48e5-844b-574f-87c1-ba77614745bb",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42bb4d06-f3ac-5a3b-b8bc-af314309499a",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54ae4ddd-20b0-5772-84ee-4ee4c0481aa2",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15fcc740-1544-5e6c-b419-cd869ec1bb51",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cdc3e09-5e88-50d7-9c6a-38e91019ea42",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14c45a70-9fc5-58eb-a4ae-99486d0867d8",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5aef8c0-0cf4-58cf-9e6e-42a8e4cd9813",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3e9522c-9dff-510b-b7a7-445e9e0e2446",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39c1919b-8090-555d-a0b5-9ce965c50ac8",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed80cb11-4e51-5ba3-bbe0-389d5b5fa36c",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69e9e513-bfb9-5902-bdf8-23826af48a7a",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f51beff8-1924-5c34-8e90-eefa68255c9f",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ded24ffa-1046-530a-bb10-4d4f6f48e5bd",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82ca27c9-8e16-5fcb-b65d-8f64e433f6dd",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8a22fb3-cf0f-5fdf-b0b2-bf925b1df9b1",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:224f112c-821a-5966-a51c-5f6dd23f84ca",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79f9f475-73b4-5974-b45e-1e6edb199d90",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64aa3cce-b051-58c3-8867-101ae36a4d97",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33207d5f-a684-5719-b0c4-10413ae1e72b",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b1786cd-cc90-5fd5-a824-4eb4c15428cd",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0444a78b-89a0-5c38-9137-0af2128d5ab1",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-messaging."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.3"
    }
  ]
}