{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:25ad54aa-a2f9-5318-b8a9-5a3473dde6d2", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.0.13.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:218584fd-a93b-5220-aa17-6a49d747cc91", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0e0029d1-03d2-5036-b1c9-305ba1d34534", "id": "CVE-2020-5398", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7f381b07-cc86-52dc-bdcf-0593ce71ac1e", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6c49c413-4acf-5035-8cfc-eecf6eddb9b9", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:128b9068-5886-564c-80b6-a95eacd0b7d6", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0b121cb4-9282-52e6-8b05-5a47fb64b1ec", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b1aa0707-09af-5edf-8c0b-c6c59eb93cf5", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5e1f0114-8052-52d6-aec8-64dc90c05299", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f4c92a9d-7e1d-5af9-b47c-0ad1a1046aef", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0bd88141-36e9-51b9-a3c8-1788730058f9", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3a26d4b-ac8a-54e6-8da3-7809202a9bd0", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e33aba2c-c0b5-5c9d-81d5-24631f9e2679", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c924f85a-982f-567c-aa0e-ae21df4ce842", "id": "CVE-2024-22243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f58fddf7-66df-5476-91a3-79da22892026", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e8278966-82eb-52eb-a708-86843245a252", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3e8b78bd-1ae7-5d04-8d68-17ed756b2311", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9b676714-8dac-5a97-90f2-1af82b9d7696", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:05db2b15-a86d-574c-af26-52c70834ce86", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:eaf53fad-19cd-58c6-9083-7ac2f0422a80", "id": "CVE-2024-38820", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms. not_affected \u2014 Target version 5.0.13.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() calls that were introduced by the CVE-2022-22968 fix. Version 5.0.13 predates CVE-2022-22968 and uses case-sensitive field matching without any case transformation, therefore the locale-dependent bypass mechanism described in CVE-2024-38820 cannot occur." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6abbc71b-e932-5e77-80e3-bf686dbb39b2", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6eec5908-245a-5f01-ad5f-81683b51abb4", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9b64da2f-c211-5696-a5b0-ce36a29e9663", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:23f1c233-543e-5181-aa9e-5959706ca138", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a90257e7-6ed9-509a-a2a9-a719cbf4b381", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:76314fa1-9ed4-592b-b8d4-6094ce7dc664", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:85fe3c70-8ae9-5b1c-a487-8be4936ecae4", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f593bafb-d347-5de5-beeb-f9632c7cb3d6", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e8bc19ef-49d0-5837-afbf-e735bc20c9a7", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:64e64229-e7a1-524c-baad-c47a44212528", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:832c0128-ac69-54ee-9ac0-d1764aac90be", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:799c2605-e66b-56ab-acf1-613a5e4b09a2", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:150f667b-ab1c-5266-9fb9-447a29c809c5", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0e98daef-625f-5c7e-9859-ed1a457200f3", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8512f4fb-4e79-5ec2-95c9-27e6c5d3b054", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:45fc5698-a8e1-5651-998b-214455f91f7b", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6767481b-410c-512e-ae7b-6c893fce7268", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.0.13.RELEASE-tuxcare.1" } ] }