{
  "@id": "urn:uuid:1a92bf06-ea8f-42ba-a10d-c0bf3dc2652d",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 5,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-10-29T15:30:49.741847+00:00",
      "status_notes": "Vulnerability CVE-2016-2173 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp.",
      "vulnerability": {
        "name": "CVE-2016-2173"
      },
      "action_statement": "Vulnerability CVE-2016-2173 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-10-29T15:30:49.741847+00:00",
      "status_notes": "Vulnerability CVE-2017-8045 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp.",
      "vulnerability": {
        "name": "CVE-2017-8045"
      },
      "action_statement": "Vulnerability CVE-2017-8045 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2018-11087 does not affect version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp. not_affected \u2014 The target Spring AMQP 2.4.17-tuxcare.4 is not affected by CVE-2018-11087 (lack of hostname verification in TLS connections). The upstream vendor (Spring/Pivotal) applied the fix in version 2.1.0.M3 (commit 444b74e9), making hostname verification enabled by default. The target's base version 2.4.17 already contains this upstream fix. The vulnerable pattern (missing hostname verification) is not...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2018-11087"
      },
      "impact_statement": "not_affected \u2014 The target Spring AMQP 2.4.17-tuxcare.4 is not affected by CVE-2018-11087 (lack of hostname verification in TLS connections). The upstream vendor (Spring/Pivotal) applied the fix in version 2.1.0.M3 (commit 444b74e9), making hostname verification enabled by default. The target's base version 2.4.17 already contains this upstream fix. The vulnerable pattern (missing hostname verification) is not..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-10-29T01:20:48.810429+00:00",
      "status_notes": "Vulnerability CVE-2021-22095 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp.",
      "vulnerability": {
        "name": "CVE-2021-22095"
      },
      "action_statement": "Vulnerability CVE-2021-22095 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-10-29T01:20:48.810429+00:00",
      "status_notes": "Vulnerability CVE-2021-22097 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp.",
      "vulnerability": {
        "name": "CVE-2021-22097"
      },
      "action_statement": "Vulnerability CVE-2021-22097 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41701 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp.",
      "vulnerability": {
        "name": "CVE-2026-41701"
      },
      "action_statement": "Vulnerability CVE-2026-41701 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41714 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp.",
      "vulnerability": {
        "name": "CVE-2026-41714"
      },
      "action_statement": "Vulnerability CVE-2026-41714 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-10-15T13:47:00.280428+00:00",
      "status_notes": "Vulnerability CVE-2026-47860 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp, and is fixed in 2.4.17-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-47860"
      },
      "action_statement": "Vulnerability CVE-2026-47860 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp, and is fixed in 2.4.17-tuxcare.9."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-amqp@2.4.17-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-10-15T13:47:00.280428+00:00",
      "status_notes": "Vulnerability CVE-2026-59275 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp, and is fixed in 2.4.17-tuxcare.9.",
      "vulnerability": {
        "name": "CVE-2026-59275"
      },
      "action_statement": "Vulnerability CVE-2026-59275 affects version 2.4.17-tuxcare.5 of org.springframework.amqp:spring-amqp, and is fixed in 2.4.17-tuxcare.9."
    }
  ]
}