{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:be667c3a-222d-5177-9f14-619adb850e9c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-websocket",
      "purl": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7",
      "version": "6.1.7-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-websocket",
            "purl": "pkg:maven/org.springframework/spring-websocket@6.1.7",
            "type": "library",
            "group": "org.springframework",
            "version": "6.1.7"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:00802978-a84f-5bed-876d-aecc5284ba60",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:39662837-3704-5d4a-9120-84618dc87024",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0a81ece1-1e55-548d-9404-dc21357231d7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2013-6429",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:792266f5-639e-5723-b025-2a49452e0406",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6429 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2013-6430",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e178ca07-a2c0-54d1-b2c0-dc8bbb0fbca3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6430 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:34808eb0-3c1f-5f5b-bd40-d0275aae5851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c6c2ddb0-4712-5e76-8ba1-285d5a4699df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-3192",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:653fa565-83fc-55b9-90e7-d0be739aadf2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3192 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:96346e86-1dc7-5dbe-8de2-a6ed3d5ed88c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a8a1c14a-5976-5f74-b970-34756700aed4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:29cd8b33-6e15-52cc-80f2-d9d9125a9ce5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-11039",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fbdc7cb1-6ce6-580f-a9e2-ee9e6e479470",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11039 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4c230849-889d-5356-99a1-372c26709fff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6ec065d1-fc7d-54c9-839c-f85d4fb233cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:eeb4020f-03de-598f-8d14-2a5f87326f85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0a20ae77-b502-5bb6-99dd-f22700918cc4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:7bd3f76d-c761-5f51-83c9-c790ceaa15a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:65d2c0a4-fb1f-50f9-9d49-cc9bd7d2de43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1aba634f-d0d7-5894-9480-5fd55bf5d2f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bc116d9d-aaaa-5b8e-b216-7165b70eb476",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c7b1a3fa-3548-5783-914a-871fef064203",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2021-22118",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:817d2aaa-a740-5303-8fcd-dfba6b200d13",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22118 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0ee57395-6c4e-5005-a8e8-4a93d606a4a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:51f1a933-c6ae-5763-b9f1-6941c568795d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22965 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22968",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:50a8f5b7-80dc-516d-875c-69ebd2ace2cb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22968 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c6f12882-f8a2-56f1-b127-8e9e11c8591a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f988c6bf-3683-5b4b-92e4-70882233e6a1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6dae02a0-45e7-5987-986f-923474c137f6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f131f6ec-147d-5d0b-9d92-62669d7c9b1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:beb6f546-cb90-58fe-8051-eb65bc9dcd94",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22243 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b9130566-af07-5e7b-ba4a-65e6bd3754c5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d76b6592-8dad-51ed-9f61-9cc63c8506fd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:22f8e596-e528-5bc6-8b59-3c10f9c68a7e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bcdd7fe5-bb2f-5eb4-a308-df1f16c14fbc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:164a3dea-c417-52e7-851c-b3b018766d4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e9ebf46b-7969-5709-88e7-98d964f92f31",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:afdac6d1-cb1f-5329-8663-7aa07b55a314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c8bd5f78-d58e-534b-89c2-76436a2bd56e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9a482ac5-5a17-58e0-ad35-e1b8bf830cf0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:be894bb5-abdd-5a08-9996-96cf45248581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ae50ae52-f0b0-5519-958c-6a929af1dc38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fb1df792-9a37-5322-9d1b-702eaadca0e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket, and is fixed in 6.1.7-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4ffa009b-0f41-526f-9685-8940393a8ad7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d3ba2afc-ca3d-52ba-96cf-1f1447e42c72",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:96362aed-d411-5882-b3f9-92f7d9f2ec0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.7 of org.springframework:spring-websocket, and is fixed in 6.1.7-tuxcare.8."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e9ad0280-350a-525b-97ff-eec781f3c9d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c7c4b300-0fa0-5048-a12e-490dbed94c63",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:792b0fd8-4e8e-5510-865c-abee14858cd5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4fd49622-3462-5a3d-8f47-d4caecae920b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e4bd5845-2bae-5cff-babb-546c211eb97e",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-47889 does not affect version 6.1.7-tuxcare.7 of org.springframework:spring-websocket. not_affected \u2014 Spring Framework 6.1.7-tuxcare.8 does not contain the vulnerable JettyCoreServerHttpResponse class. The vulnerability (CVE-2026-47889) is specific to the Jetty 12 Core reactive adapter, which was introduced in version 6.2.0 (commit 0a60c622cc). Version 6.1.7 uses a servlet-based Jetty adapter (Jetty12ServerHttpResponse extending ServletServerHttpResponse) that properly handles the sameSite cook...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a9ef0e18-e729-54bd-bded-29bd2adf2234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:6114932a-cf89-5653-b711-4e2ed41f09b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bd71484e-5df6-5009-834b-743e4eba38f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:f6040d0c-24c2-542e-b21d-0e54d279a018",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-websocket."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-websocket@6.1.7-tuxcare.7"
    }
  ]
}