{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bca31549-f1b2-56d9-a866-ee5d781530a3", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.1.5.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:06a003c3-86fa-5733-8a2d-1e26e17ae09b", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:731f4c0e-f07e-5aa4-a6bf-cb5d9903bd30", "id": "CVE-2020-5398", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5398 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ccc5cf72-475b-5c00-bc34-077cae5ba0ab", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d7131fc7-eba2-5a6e-95a5-9ac4e030d977", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6325073f-5e6a-5385-880a-658be9f1a9d7", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28c318cf-039d-5433-bcef-5d9241d127ee", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:41f58e5f-9ff5-5303-8efd-94e0a50612b6", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c5f4c478-dfda-5236-a9c5-b7dea23c5c27", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0be8a594-d782-5203-8057-6a58eca60463", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fba90356-221d-5e96-a9e3-87cab554ceba", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:28075d4a-2d85-5228-ae7a-31c398356c8f", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e8b59e16-e5bc-598e-a9d2-d8642c5e3228", "id": "CVE-2023-20863", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a762b3f2-7363-5eac-a4f8-227573d08db2", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:750b898b-3fc0-57e4-9c42-74b60173c478", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c692815c-1b42-5f50-911e-0ec62b528eaa", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c2bf769e-3806-565c-a23e-e5f728019f9b", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d2d4df71-c97f-53ef-8278-b3d99d541fc2", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jms 5.1.5.RELEASE-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a0a0d5d4-9726-5da9-ab47-b03cde93798b", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:69c1c136-f5d8-5e97-9759-998a8d03d8ad", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1826e169-ce9d-5fe0-91a1-a299f8b676ab", "id": "CVE-2024-38820", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:21b0c00b-bfa7-5336-8ae7-63f20d0bfdc8", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d902450a-2aff-5ff9-b77e-0fe8934f6617", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ec038dd6-170c-5979-a1c2-30080138210f", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:01c476f1-0fce-55bc-b26d-d9606ee69ebc", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e85de3f2-51f3-55cf-bc30-4adf5ae6dac1", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cf1c6106-74f6-593c-bb1a-e7220f26500a", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a3886fd6-fcb5-5777-bca7-878a7abebf6e", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c0c3c007-bdd5-55d1-aa04-7098060253ac", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c324579-5d43-5daf-8b5d-b9f4c3d86f46", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c2dc85b2-6abd-5dfd-918a-d2f529022298", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1d744172-5b09-5591-aea4-e4693e1c29db", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:61b82a52-6981-56f7-a0a4-6bb9e9c42c58", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e97b239d-13ec-5232-abe9-960e8811d8fc", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5f75505e-eda3-5507-8e68-316cba9f7238", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8c7b4222-f34a-5b6a-a490-df068fa5922a", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0477f3a2-5dfb-5a90-bd6f-5863a4368c46", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:d022f1e1-e1c4-587a-8e68-f767845de04d", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9ff83632-1bb5-50cb-9a92-4e8230c79483", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6a18eea4-5591-528c-8a42-e6de86728686", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms. not_affected \u2014 Spring Framework version 5.1.5.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41847. The vulnerability exists in the Kotlin Router DSL filter function, which does not exist in version 5.1.5. The filter function was introduced in version 5.2.17+ (September 2021), after this version was released." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:86deceb2-7fa2-5545-a5f9-b537f20204ce", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e1d34485-0af6-53d2-82f4-7d87d4ec1dbf", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cd1bb324-cc35-584c-bc41-c5e764609fdc", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2e86bff4-a381-5719-aa0e-4f3dbe675cda", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:7f85b284-d245-5e3c-9533-2951592775eb", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4dcafb50-ca7a-5c60-a509-0928195abc6c", "id": "CVE-2026-41853", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c21f84df-2833-5c63-a08c-5ec7d30e4efe", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.5.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.1" } ] }