{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:64a9bb1e-8dfb-57ea-ba9e-327542dccd94", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-messaging", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:18e63cae-266a-5b73-8af8-2dc8dcd02a5d", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-messaging. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4bca44fb-9f46-584d-bd11-b39efa9da074", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c958e529-8778-5a4f-a0ef-a608ea0b051d", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:607a28ff-fc84-55c4-b4d2-b520fa53c230", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5a977783-168d-5895-8efc-64215872b98d", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3411da9f-5739-5240-b2ba-3db7cbb35e29", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:000ca10c-acd4-58c3-8159-6a6a05f8c077", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:43677a85-3188-5b11-81fc-41a14a3f9744", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0d31fb1e-fe35-5e7e-85e6-da041421be89", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:83e4bd2d-fc61-552c-9616-eb15cc5667a7", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:250a08af-a06d-56e1-9be5-503aa820eb88", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:75f26710-acf4-5201-a4d5-ab9da691bc39", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:38621109-a14d-5cfc-9b5d-d65b3ba02e24", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4b4d27d8-c51b-5d22-90b0-90c54f42554a", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bd8a9f8e-d581-51f0-8427-f5bf68959b86", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:14b51f1c-744c-549d-b5af-ba5eef29f349", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a0c4e2e4-c9ec-59c5-a9a9-ab14154d7091", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e1829620-bffd-5d29-b272-61a676dd1b67", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e8f1ba73-d401-5899-ac88-3d749346709b", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:71d7b8f0-f5ec-551a-a686-c41d0c60c27c", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:258ca71a-b092-55ac-8108-cff2499b757d", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:865c66f4-c25b-5278-93fa-49c69930e796", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:26006b7f-e95d-5168-9222-479317eec548", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:265d8961-232a-5ec7-a6d7-1d4b587e4647", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:eb1b6113-4bf5-57d2-ad2d-bcc099674d3d", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2e0cc575-6d4a-5c61-8c3a-0ba9209aec20", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:984fcb74-a19a-5205-b5e8-dc7cc28361f3", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e4a03f16-56ce-5c0b-a714-074402927de4", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:dabc2e25-6141-5c04-a260-583e264b63d2", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5ce962db-b26c-51c3-bc74-19593b2795db", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b4e62a73-560f-586d-97db-00cf9431d558", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:859e6811-9b61-5df2-b531-ce1dd37e3b28", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:840fb9ec-d6a8-5fd7-b784-d2dfdf806b30", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:09894d7c-d68c-5be0-abd2-af3b321089b3", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:44fef1a7-b92c-5759-9a7e-0172a9474384", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a6e7f85b-546b-5af9-9bae-f27952b9d4ee", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:80f8f4b8-ead2-57d9-ae13-3728ace69e03", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2c845a66-3eb2-51a7-85f4-16b4b7ec2907", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7baee77f-c8c5-53c5-9a17-2f3c7235482b", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:11386fd8-b40f-59b6-b988-158f3758065a", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.1.20-tuxcare.10" } ] }