{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e06e8148-f838-5541-a929-6c825919e69b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21", "type": "library", "group": "org.springframework", "name": "spring-websocket", "version": "5.3.39-tuxcare.21", "purl": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:5367130a-a9df-5eef-b9c9-08ebe4a98857", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0f335dac-ae92-56f5-9366-9afafd8a9792", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.21 of org.springframework:spring-websocket. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:6a916fda-2df4-5626-b72f-6a5354eb27b3", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0a45baec-a3ea-55e8-bd86-69c5c37f1ed2", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:9b9a120e-c309-5721-beca-c342d6aefa73", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:70004785-33ba-5655-9ef9-879aacc358c7", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:47fb80ce-3ad8-5b3b-acc1-fef3cfef1235", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e0924838-eae5-58cd-b677-22a42ecaf994", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-websocket 5.3.39-tuxcare.21." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:566f6ef9-96e0-5372-a55b-ed2c6eb2c55b", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ccbbc3cd-4ffa-5f4b-a2f9-cc1580d01696", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7c038538-29ef-5c25-ae0b-c6eb86451137", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:edc891b4-c75a-55f6-9de0-11d330474709", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:368d9e21-6dbb-59ea-b77f-3e2e53758ca9", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d94b2494-96bc-5e5c-b198-1efee4272d85", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e84a224a-c11f-5122-b6fe-125dd429592b", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:2ae4164f-df0d-5fb5-b2cb-538059731897", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:8983c629-e050-51e3-aa28-2319942d7652", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:724bcbd9-7fb7-556e-aa97-e6b2a5a862db", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:24156252-51f3-556e-9dff-d7f5842581bf", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:de00063c-4055-5a73-a25e-1a1205240a9f", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a9e090e6-87c8-51ca-a78f-24282614333c", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:36400eb4-c9c9-5753-afca-52833451ff8c", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d90e911b-2a6f-56f9-ae9e-44f8e4294a42", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:17c0a955-9862-56c9-a216-4844922ba0d1", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:aab73dcb-c89c-5871-bba2-8f61bc533b07", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:bc9e96b3-13b9-545b-9e67-9abb6ad9f88b", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:96b623a1-34c0-5f2f-b6c7-b8c00aeb4dba", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:86fa83a0-a4a0-5bc0-bd71-811fe46f764b", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a7867348-083c-5c1b-9bd2-e720b613cb05", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:18eda502-e147-58bf-8a7d-243c262ba9dc", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:8fb5aaa9-1452-5b9e-82b1-0eb2c676fcad", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:50ed4425-4514-586f-b025-df5c7cba6fc5", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:2651a2cf-c615-58cb-b9da-5b84d22db3f5", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b32cc7e7-4c28-5214-9d7b-a65be23bb4de", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:dab68238-bf95-552d-9dff-8643e07979c0", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5be7bf16-a893-5764-9951-5853243f127d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:26cf925d-6eaf-52c6-9290-c4c7f1513137", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:9e564ba3-1af0-5b20-8290-4213e6e1974f", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5ba659cf-b017-5009-bed8-c78c036f0d28", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:6224d53b-324f-5ff4-a731-33bb3f9eca6c", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f798477a-ba6f-57a1-a66a-0f82f60ac572", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ec4159f2-9e15-5c8e-b15c-4be6008e7145", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ecee9292-25ae-5565-b855-c0dfc36c4cfc", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:11b6567d-1ff1-50a2-9647-45b7bdf3c94a", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5e02c04c-2ba5-5eca-87f2-12a00f8a8eea", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:47679cb8-b286-5bae-ad3d-26f94a4804ea", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b7da3f82-651a-5afb-92ae-ed7b78a37780", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.21 of org.springframework:spring-websocket." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@5.3.39-tuxcare.21" } ] }