{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6563ec19-4fad-5c36-a0fc-0c03f4971a62",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-websocket",
      "purl": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4",
      "version": "6.1.13-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-websocket",
            "purl": "pkg:maven/org.springframework/spring-websocket@6.1.13",
            "type": "library",
            "group": "org.springframework",
            "version": "6.1.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bb445f67-252b-57c4-8d48-b36cc227b69f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:427b2b70-b2b0-5f10-b007-fbb08c6bd108",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3d76c955-4b2c-57df-b2aa-a6471632f4cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2013-6429",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:81145331-1601-5819-a097-34ed77b47841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6429 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2013-6430",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2d520cd4-6a02-5858-82b7-41326248e634",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6430 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b0730fab-2751-5b6d-86ed-857a62e81e29",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ff6ffa3b-47da-56a9-8229-d2358020f635",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-3192",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5962a66d-5ce2-5004-8728-63ffa82e04c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3192 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0d38c3b0-05e6-55d2-a4cf-96906d11b0ce",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:75c90a0d-fb20-5f29-be12-0dd5e6a1f212",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:48b22666-775c-5f22-81f2-79998453a555",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-11039",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d6b58910-7e29-5302-a6e4-ed78a9da35f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11039 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c9104c64-73b8-5e78-97fe-850894130c89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7e771b74-0f11-5906-9993-7375a241bf44",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cd2a78b7-f461-592b-908c-72cdc9f929c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0083613f-a0a9-5252-9371-f2f759f35ed9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9c77fc7f-882a-5b57-801b-64c8bec2b6d3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5a278a37-c9bc-5d05-993e-2ed26d1515d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:be7c9d38-18fe-5793-bad0-7c49d707757d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:93dd28a4-47f1-530e-82e9-4a6d66250f2b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d2e6a4ba-73bc-58c4-a3dc-634de59b181f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22118",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:260fdb25-f8df-50b2-bf80-ed618bc39d19",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22118 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:07d909f2-5f45-5e6d-9468-9cb502a33244",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4bc72f48-907d-5966-a4fd-60900253ca00",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8476c3f4-c38a-5893-b6ed-bea7b6170157",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22968 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:26158183-3699-5e48-99e9-4963c13f8878",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:dd9b8ff0-77b1-5f03-af26-e2a811b35d9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b5b0afd3-2d10-58d1-9a6f-4ee8ac583b09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:128cd04d-3853-54e6-993d-abe7f69ca58e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:70179fda-6dba-550e-9f2e-10a0b29a16f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22243 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5ad3488f-5280-543e-a742-93ce9db8bd2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f990c697-61e1-5df3-8920-6959e1d39bd8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:61b058b5-531f-597c-87c7-43620e90db45",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:68bde5db-ac49-51a5-9e51-0c6f6b1ae038",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2024-38809 does not affect version 6.1.13-tuxcare.4 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework 6.1.13 is not affected by CVE-2024-38809. The vulnerable regex-based ETag parsing was already replaced with an efficient state-machine parser in upstream Spring Framework 6.1.12, before this version was released. The fix (commit bb17ad8314) by upstream vendor Broadcom/VMware was included in the 6.1.13 release that TuxCare onboarded.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bd857142-b803-5cad-9fb0-26fb7f0e83f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5ab4ecc7-739b-5586-92fc-60ee5dbe6a86",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:b5d66c02-5748-5074-afb9-df5c3c7fb1ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2da12326-b024-587d-bce3-52e9ece25e4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bec5c9f6-3371-592e-a9ff-25d822456608",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:a48ae03f-c0c8-5166-affd-e9333d6d308f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fafead73-ddf0-5df1-8089-d0385813997f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7d5703ee-da77-50be-938b-85cfc83aa56f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:390f2b2b-ccc1-579d-aa68-5acc5096c87b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:38973c48-b984-5d41-9f4d-53477c560a02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3a1c9208-065c-5a4d-9d43-a08a0968b430",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cd332dca-17f9-56a0-a6bf-6c280c70fc48",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:db15d373-a02b-5065-96d5-1ec678aac7d0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0a7a497e-0f52-50d7-b763-4eb9ae23653e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:41cc1fe3-cee1-5d79-9a32-b1c228c0f7ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e1826c4c-6593-5b09-ae46-b7e471a2de51",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47889 does not affect version 6.1.13-tuxcare.4 of org.springframework:spring-websocket. not_affected \u2014 The target version 6.1.13 is NOT AFFECTED by CVE-2026-47889. The vulnerability exists in JettyCoreServerHttpResponse.java, which is part of the Jetty 12 Core reactive adapter introduced in Spring Framework 6.2.0 (January 2024). Version 6.1.13 predates this feature and uses a servlet-based Jetty adapter (JettyHttpHandlerAdapter) that properly handles the sameSite cookie attribute via ServletServ...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d7d66893-d6b6-5b26-b2d8-514e1e096e8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2ca4e842-3120-5713-9d26-92979351ddfa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8bc469b1-56ab-5c29-a3ac-909f9e4aa818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9e069e62-30c6-5455-a703-5a3e12f60874",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.13-tuxcare.4 of org.springframework:spring-websocket."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@6.1.13-tuxcare.4"
    }
  ]
}