{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7aecedb1-577a-5289-8c80-c953510cac70",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-websocket",
      "purl": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6",
      "version": "6.1.7-tuxcare.6",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-websocket",
            "purl": "pkg:maven/org.springframework/spring-websocket@6.1.7",
            "type": "library",
            "group": "org.springframework",
            "version": "6.1.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ebd3df78-0e9c-5efe-aa33-f38b5dcc5d91",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:21801dca-fd6d-5350-b64f-a8c5cb8c1f8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4cbbf692-8f65-53ce-a0b7-e9ef5b132f19",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2013-6429",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:67070c23-380f-56c0-afab-4273859cb0c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6429 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2013-6430",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d6f6edbc-b557-5542-ad59-1d1af79fdc96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6430 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cb303791-234c-5db4-86e0-e3c78bff2fe1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ba12fc24-0f3b-58d7-8fef-ff319d9a74be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-3192",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ef27d975-f1e8-5ec4-9e38-bc9b7ec8a50d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3192 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4cbe726a-5df4-5a71-9e4a-84b1080cac8e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:354bb23d-0317-5d2a-92a5-6746e3936eff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:85e92d96-9eb0-5015-b6ec-9a2ba1b78f87",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-11039",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:c05cbd90-566e-50f7-b2b3-644c7eb3e16c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11039 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:d8dd433c-4f14-5ab4-967e-e5e5e92f4dda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:37a9a293-5be3-5d74-94b0-201b154f9da1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ad681ab7-8cf5-5868-b323-c77e66382185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:69c05dff-4114-50e0-a8e1-2c690cb22479",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e31ee886-a990-576d-97e8-b9038f8802f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ff371cdc-4f2a-5db9-ad8d-837a09ef3603",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5d57ad0f-a6fb-58fa-883e-42e157b33908",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e53c4718-eda9-5147-ba0d-ff9327939f94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:79d8fbd9-2b30-5ac9-9699-44d4f502aed5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22118",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e415930b-48b9-5855-99ea-51f9ea734ae8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22118 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:bda69201-21e5-5b24-a26d-ad2dc08c1cec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:95190233-f96e-593e-a55e-8c3498a26946",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6a20d401-337a-5b6b-99fa-416f8ccb3b7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22968 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ea744dc9-3267-577f-8c7a-0560b6fd3a7d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:b6ff4190-df22-55ab-a493-427e81b6a489",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ad68ed7d-c28b-5243-9faa-08a159e429b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:61eb1f49-22fc-5f78-989f-b0ac1a4d609a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:72a6850b-e99a-59a6-abae-887f9c7798cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22243 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2dccf279-6e09-59ec-a924-b86ec5f3f5e9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2ea5b31e-d629-5c58-bd92-d6bf86691345",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:a1a01730-5418-52ce-917b-bbd618eab24e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:4de2e11b-4b49-5b6d-b6aa-6db9fb825713",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7459a7ad-7287-568f-afda-e3cfae9d87ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket, and is fixed in 6.1.7-tuxcare.7."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:09bde30f-17db-5f2c-8add-be1307cd5c52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fb27e2f4-a90d-569c-8cdc-553f96a16e04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:614f47de-5680-5a05-bf27-8d4d01910554",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1517d997-9b9f-5151-8035-bd1f4983e563",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:5abea689-b4b6-520e-914c-6737f1c61046",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:7ea64584-f3ea-5c52-9144-3988f6d74dba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ecf51b99-9653-5250-af4b-444d74b31e35",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket, and is fixed in 6.1.7-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:dfb63c2e-2848-53f2-be43-cf14f6b9b024",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:6b9987cc-2186-56c4-a898-e78536d4ee36",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:cc6909b9-d526-57e1-aaf1-12eba4fa5429",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.6 of org.springframework:spring-websocket, and is fixed in 6.1.7-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:2c13b247-feb7-5d71-b4ba-4ed88a5b41c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:853e5ca3-94ab-59e8-af14-9ce64694f0ef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:1128eebd-0925-51ba-adba-3fb8c7b0c9b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:ffe1c559-dcb2-504e-960e-513644e5226d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:fdd16b13-5ca0-51a3-89e7-8975fac790aa",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47889 does not affect version 6.1.7-tuxcare.6 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework 6.1.7-tuxcare.8 does not contain the vulnerable JettyCoreServerHttpResponse class. The vulnerability (CVE-2026-47889) is specific to the Jetty 12 Core reactive adapter, which was introduced in version 6.2.0 (commit 0a60c622cc). Version 6.1.7 uses a servlet-based Jetty adapter (Jetty12ServerHttpResponse extending ServletServerHttpResponse) that properly handles the sameSite cook...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:9b4823fd-9596-5f31-8f73-032f59fc760b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:66977319-7824-58c8-b8c4-8445286e5662",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:15106bca-a75a-547a-af24-4d0ab9fdad29",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
        }
      ],
      "bom-ref": "urn:uuid:e53396c2-2e9f-5b9e-9f15-d7404786eb4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-websocket."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.6"
    }
  ]
}