{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8c8939e8-f415-5ecc-a624-cca380911959", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5", "version": "6.0.12-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2023-34053", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:2b6ec2a4-32b8-57b3-8e30-781cb2bff04c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:36f22f52-2b59-5c50-bb29-fbbaf5fc934c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:c3f31480-2822-5ac6-82ad-18ad6fcb8158", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:57a982d7-4ff8-52bc-bf73-83fe54136162", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:56be6221-022e-5c33-be51-910a9636e158", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:de3dcd28-76ab-53b2-a453-f83ed2e5a7d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:291c69e3-3ea2-5887-961a-4382a0b597be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:534c2915-d95c-5f38-b196-913ce96968e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:52e24aef-394c-5f0d-857e-d590d4f4c2a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:1c3651a8-06d1-5105-8ebc-804ef3714665", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:4f75887f-928a-507a-b459-ce6b9cd7c4a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:907d57d7-30f3-5fcb-aac4-fa7bb473a600", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:edb11c9c-eac0-5a39-9834-5daeb2b997a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:1adaf59a-5bce-57ef-961f-02f8e2d506c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:45bb120a-c2c0-57d1-9ef6-6c233856a2df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:4f39625f-681c-53e4-b985-4a0ffde2020f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:049037f5-974e-567b-8ba0-4cfc458aa1eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:ff5d492c-d9d2-52fa-8cb4-87128eacbf0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:9d98932c-b770-525f-9686-8479a0e50319", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:64cf84fd-2f26-5e01-87e4-ec265002ad2f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.5 of org.springframework:spring-jms. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839", "justification": "code_not_present" } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:3977c85c-5560-51ae-ad44-77c78d650038", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:7559ac19-0a57-5e56-95cd-8014a28789b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:109547d2-13e9-53ef-924d-3b76bd171e2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:803561e3-489d-5aa2-963b-863ae1d3cb26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:bd8478f1-410b-5b91-a7fa-d4e9c801d0aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:fef0a173-e057-5e5d-a98e-f82aabe4d132", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:c1c802d4-0c3a-5ef9-b327-63aff52f865c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:9037d67f-72ff-581c-904a-97e8d4a6211d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:edf1996a-2816-5f7f-a501-4e41e7a649f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:25bf49a7-2591-5b06-98d6-e6c31db1ac40", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:626c0fa5-3fcf-57b2-99c2-17b1ff4ffee9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:591bb91f-928b-57c0-a4cc-674486af3586", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:a6768bb8-0e56-5d89-be43-3bff0c3215cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:7efc53e9-95b4-5637-a989-dd091d7aa2da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:389834fd-0414-5f42-8460-f59c092b3892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:bdb3b9d0-316c-56be-9673-611180a1e5fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:02b13bc3-0e05-5eda-ac9f-0c1502ce567d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:1b06ca35-4952-5be4-a7aa-beb3456efde8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:ea675f71-71a8-59a1-8404-d3b2c2b8b9de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:afd70f08-4f6f-5840-82a1-964da0b28d31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:6087473b-77d6-5180-9121-196cf088cc0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:9d300d0e-d8ef-5095-b5df-e8afc62cba5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:c5c3a7e0-2298-525a-9ae8-880c1fb15bf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:14e88df8-9447-5ccc-9275-af7a96888bee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:e87d2ef3-d75f-5cb6-a5f1-e57587964f06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:3704a496-1580-52b5-b41b-1ae237efb278", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ], "bom-ref": "urn:uuid:e0ca078a-89da-5ad0-b02f-1a94bad7294e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.0.12-tuxcare.5" } ] }