{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5145062d-2eaa-53a0-ba3a-a7532490004d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ba6ddeeb-92b7-509f-afcc-5be05d0ffb74", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-jms. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:05b54de0-5b95-5824-b2f6-50e89798b00f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:41a6b252-3224-5cec-99a6-4e48bf10cf6c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:526cfc7a-2f37-52a3-9d41-434205e896ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f51f61ec-7b18-52be-b875-96afdc2b8d4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:95481dd8-5cba-5d67-8e7e-b533b34e59ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ade89ab9-4f14-5a46-9910-806c1b581bce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fa75db93-e949-5632-9ffa-3bac0227821e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a1c5d4f9-92da-50a6-bfa4-f9262b59e35c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9cc3af1a-1bed-5029-a719-d58d59bb8ba3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:07287992-f70b-5542-9a5d-addd79dce089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d337b5a1-5943-5b84-a3c6-87d79ad3e3f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f6dc0aac-2253-5241-8ecb-5626f671e401", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d0edf7f1-6f0b-5978-979a-628fb3fa473f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7d1069fc-6a6a-590c-bb27-11edb5fcb624", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fa6bd883-05d5-592c-a7d9-fe9928b2cdbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b41b719b-b040-5072-abdb-22390732e002", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c7537004-39e5-5de0-a84e-fa159bc6dd1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8b44e455-e5d6-5fd9-a42d-c0d76a96b9cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fa3575b6-e45b-596c-a6ea-e461287bcd5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d744ed40-1405-5219-9d57-5f639dbb8338", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4de48101-fd12-519b-bef7-28b507aefc10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a89b1ca2-0c9f-531c-951c-2cbb10352a8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:73de6fe6-282f-5456-b81e-0f91e8f7e97a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9b21e3de-f7a6-5f5f-bca2-7b281a28f9e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:18934101-c348-542e-859e-3897a17393c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:eb46b605-3a3f-553a-8ffd-aba3fb04ef61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a598ac70-9fa9-5127-973f-2491ffa19651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:60d39a4e-7479-5515-bbba-eac1ded34c9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:aba460d0-c779-5444-805e-d3cc9525f7c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f62653da-3e62-503a-a6b4-92047161da2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:01283ed7-c069-50db-9515-dde03bc6421c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:22a675ac-8c10-5567-a204-1766cbe2558d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:eaa08b5b-acde-58e0-9faa-676fcba90222", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:d61f7476-5436-5246-a4ac-d88583456e41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e166a93a-e63b-5459-8fdd-e372924203a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:228cdb20-f3b2-5479-8972-171f48cc812f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4852b28e-bf97-5da3-982a-730a83de0f23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c83e82e6-a22e-55ae-be2c-af77fc79f1df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e354add5-6268-5d23-b89a-32a99aa61ecb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.20-tuxcare.11" } ] }