{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:3a83efd2-ebef-5990-b6c0-bb7bf725ac6e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3", "version": "6.1.14-tuxcare.3", "pedigree": { "ancestors": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@6.1.14", "type": "library", "group": "org.springframework", "version": "6.1.14" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2009-1190", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:0e409798-7423-5902-8167-c77d834b4ed0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2009-1190 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2011-2730", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:f86b3ed2-1cf3-51be-bda1-fa9a68a23b7a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2730 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2011-2894", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:cfdd398d-a4ab-5568-bdf7-9509b2cc8d71", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2011-2894 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2013-6429", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:7223a45b-60f4-5f90-ac27-a780c4ff102d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6429 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2013-6430", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:a11906da-753d-5c1a-82cb-e09a2fcf4b56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6430 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2014-3578", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:003b3804-85ce-5e0e-ae72-9c072dca0882", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3578 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2015-0201", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:b54c385e-c972-5d2f-b739-df7112323ccd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-0201 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2015-3192", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:34fb0b58-7067-5ce5-b018-d633f774476a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3192 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2015-5211", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:c5424726-952c-546f-800e-2d1168c9cd77", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5211 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:757264b9-d0bb-5011-b179-9c05757d49f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2016-5007", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:e86883d1-042b-581a-8736-b2b589dd50c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-5007 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-11039", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:253f1bc9-44be-5c88-97cf-71d45427309d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11039 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-11040", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:9db37b21-cb9a-5b8e-9fa9-6aed61dade50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11040 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-1199", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:9a5d9560-cdf5-5190-8744-79d70de7780d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1199 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-1257", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:fffbd9e7-3571-574f-9f2f-21293a3ee0b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1257 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-1258", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:36fb73f7-e3f4-5e15-86b9-cf262f09436f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1258 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-1271", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:6bf434b7-e250-5075-9ee3-1b914c031eef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1271 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-1272", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:ce7363e5-f881-5d3c-bd3a-55cb42753a1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1272 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2018-15756", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:3f4176bd-200d-5a46-9786-e25dfadde70a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-15756 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:54e65b72-2506-5543-b68c-362fab85397e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:00764673-f0b5-55eb-ace0-4a9db4946919", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:405c4d90-911a-55ce-8c60-d27ca6ad98a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:b072c0a7-5b00-5893-b9f8-cc9e916e2906", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:77f84de1-cde8-5c09-ab39-a33f2f9ccfa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:88956ebb-e8f8-5a3f-9166-c4c5f49753ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:87bb9d7b-0433-5c20-a77b-53472b845012", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:35a3fa35-8def-5923-8f5a-126cad47f3c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:3e713d95-e04b-50b2-9fee-ead1d2f9225e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:ae994b65-dc11-5b92-a5da-bed227be6e3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22233 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:7fec1045-57b3-579c-bf78-34eec4638a8a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:eda47b3c-2424-5dbc-9f26-3a9438311866", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:8ecab631-5cd5-513b-b068-2a3001308ed8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:9fb0b51d-b23e-56a7-8fd7-fe9f074de4b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:2bca0529-2606-59e2-b92c-900443e22ec6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38809 does not affect version 6.1.14-tuxcare.3 of org.springframework:spring-websocket. not_affected \u2014 CVE-2024-38809 is NOT present in spring-framework 6.1.14-tuxcare.3. The vulnerability was a regex-based ETag parser (ETAG_HEADER_VALUE_PATTERN) in HttpHeaders.java and ServletWebRequest.java that exhibited catastrophic backtracking, causing DoS when processing malicious If-Match/If-None-Match headers. The upstream Spring Framework fixed this in version 6.1.12 by introducing ETag.java with a lin...", "justification": "code_not_present" } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:e08c4b7d-0785-5d32-9034-a10613a05ca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:77433739-2dcf-5c14-9262-01eb7461df7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:e4ef35a7-b422-5314-9c8c-749e148a84f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:10f088c6-89c5-5e36-a3de-91eb99ef62ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:a326ffbd-0593-5cad-a444-5c414444b373", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:387cb9fe-199b-5e71-8ab1-db127ce3f6eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:375f7f69-3350-55e4-b889-047e7621af50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:fbcdf654-9c33-55be-b536-9aea706a4595", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:45e742fa-f5dd-504a-8f94-ef5e1063a6b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:98e9b682-c357-5c61-b4dd-cfb179e7e2d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:f492381f-b1eb-5aac-a908-555a6c87fda5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:3e3cda3c-975e-5f4b-9dce-4c00be4307ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:12c2df77-86ae-5b81-b85f-28152c124e41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:696e1999-bf96-55e2-87f6-3b909093f426", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:cbfa6765-3886-5088-924c-e309069df239", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:8ae076dd-9d5b-5af9-a1ee-d0bebb561f16", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47889 does not affect version 6.1.14-tuxcare.3 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework 6.1.14 is not affected by CVE-2026-47889. The vulnerability exists in the Jetty 12 Core reactive adapter (JettyCoreServerHttpResponse), which was introduced in Spring Framework 6.2.0 (January 2024). Version 6.1.14 predates this feature and only supports Servlet-based Jetty integration via ServletServerHttpResponse, which correctly handles sameSite cookie attributes by setting c...", "justification": "code_not_present" } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:71667165-7dca-5582-b368-d5f61fecb137", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:147c1d2b-0a9a-54ef-839a-7e5cec0fac2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:41766459-f9f5-510c-b275-47379c849bc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ], "bom-ref": "urn:uuid:da789c4f-d7ff-5dac-9b76-3c97179ca1de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.14-tuxcare.3 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.1.14-tuxcare.3" } ] }