{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d838ae10-58e9-59f8-be15-7498f48d5ac2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-messaging",
      "purl": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5",
      "version": "6.0.12-tuxcare.5",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c1a95b66-c112-5cda-b80a-da99c8a54ea9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7cc6eb9f-16ae-5b96-856f-da2fd82197c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b319721d-61c3-5cd3-9bc5-030ce68ba275",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a3a115f2-f2d1-562e-a4b4-93790f541775",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:776876cf-245e-51eb-a9b2-0e9f8517d04a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b84bb983-6a53-580b-b153-de4ca4e3a7f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fe16074c-6a3c-5960-a600-31433ccbdac3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1be65cce-db3c-5821-9662-3af11dccd35d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0a428e0e-946b-5aec-a64d-78def6ee5ce8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4fd72abb-bf6f-55e6-be10-28bd0afc84f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:46d6fd87-9373-5816-b1b1-cca8bb35ba42",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ed48051b-a3bf-5b15-956b-f930a16acd05",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cf7dfad0-c101-5aba-b143-25bdec693877",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d83d72ee-ae5d-5837-bd62-a092449a8179",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:49735a53-4dcf-5cb7-b685-b76ebd3a7091",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:010b90a7-e144-56e1-88fd-8ec3c801b13b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c15c161f-6a72-565d-aa35-967a89b615b0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8939288f-b6f5-5450-883c-e3016c11a053",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:35239770-a1ce-5679-ad0d-2e646ad0ee49",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:20c4f264-ef13-5a89-9749-94e8f31ed4a0",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.5 of org.springframework:spring-messaging. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:36d93cba-48d1-5c72-800b-a3af8b04dd59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2f965dc2-cc8f-58d7-8041-72934c42a2e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:aa33f008-94d3-508e-afa3-a632712b613e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:190a6d64-9343-5e44-aeaa-4bd28045840a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fcb7fc99-959e-561c-9170-a118b05efae8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:308846d1-1fe8-586e-b30e-f31b0caf1d8e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bc23ae97-368d-5237-9aa5-eaa9897393a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7684aaa1-1831-58a3-9e99-308680974696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:296a2530-e5cb-5465-89cb-4ea5e5e1b933",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:134b358a-ed62-5b9c-8107-5712f2f38170",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:6c538175-2539-598a-a184-7bb3f2c33c6c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5349445a-70b3-5d4f-aaab-542f4ea60856",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9686b8f1-977c-5f3e-b935-2478f4ade5d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:03f50833-8a30-5ed4-ae12-14798ec07d04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:afacb22b-6d68-548d-825b-436b3ccb0ce3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e8c47734-9800-5153-a393-795805bcc92e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f92136b2-efcf-5547-9c9a-5d81fa7904b8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:abd23a75-bb74-51ae-9974-072acb1ac5f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2c317168-64d7-5e19-9d66-0de08ce6aec1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9048460a-f9c3-5493-9465-d4794c331f03",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5fbef214-9b60-52f2-a799-99ea9b32bd69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d8fffa08-eb3b-56c8-a7e9-503e1a3cf7e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d39a9e40-a185-50d5-85eb-e8c4f48d2c05",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:228d490a-6e99-5a57-9e2c-a34205eed41c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8993e878-a2d2-5b05-b596-306de2ae967e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:36f90fcb-750d-5f49-9d37-6e431d386e26",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e73ee3e3-6be7-5919-a48c-77e782af553f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-messaging."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@6.0.12-tuxcare.5"
    }
  ]
}