{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:418d5f86-5510-57f2-aa03-85a92d4ed1ac", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5", "version": "5.2.0.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f09c338d-8ef3-53e6-95be-5421b433fb28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a24fddd1-694f-5922-870c-12dd735ef1a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a0a09985-bcde-58d7-816a-7fb86de4d759", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b866c1e8-bfa8-57f6-929a-4defa1edb12b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e8b6db9c-5dd2-5fdb-bfb1-90c6bddfc1c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:eedc4b45-d672-563f-b188-d3c5e9da2b2f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:71daeded-3423-576c-ba72-f8c23b3eb392", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3ab39815-cc51-5ad0-8e14-c463e5cbeda6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:437051a4-478f-5012-95d9-9f8ac756e232", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5aaf65e8-7a6f-5377-8928-eb6cac441318", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3149c06e-a296-5325-b847-2f85e0b89adf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ee7af084-33c7-5533-90c3-8967addff5c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:31095879-c433-5f68-a4e2-559f50446e41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:793dc67e-6226-520d-921c-a4064a2ffc47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0a3e91f2-bbf9-5f37-8d3e-8245d84944b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ee5e3ac9-36a8-5bbf-80b8-29f473ce5550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9a7c4271-450d-54dc-8df3-339b6c5e72a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2f9c3bb0-ecfe-50be-bdeb-9a49ebcc7dba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0689fff8-b9bd-5bfb-9f17-c5157f17ea4f", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jms 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:712aaadd-cf9d-54b6-8d45-248e38125a9d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f816b467-3280-5dd7-b4fc-d020662a5085", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ce00010a-bc3f-5846-9b82-a49041d43ac3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:47288923-f6d7-5397-958a-1497004548d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3c147884-9fe3-51b2-994b-8c73a745e54d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:afd15705-f7a3-5614-b3bd-911635172c1b", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-jms 5.2.0.RELEASE-tuxcare.5." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:18b01f64-d1f2-502b-9b4d-388947941255", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:48b959ed-fe7e-5e72-aa73-98ccdd238db7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6a6d2a1d-a301-5fce-a934-a3b57aa072bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8b60e748-6184-5b0e-8888-7cf327e63507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:328e0c8e-919e-5302-a3aa-57ac6a088eab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0371357f-9545-5326-bb35-ebdf0b805761", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f8d032e9-27b4-5fbb-93d3-c1aa80307a30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8cdd77aa-1b01-5fb0-8312-98a07cb8ac1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b6b005a4-40f6-5b1d-a5d3-1835d8b5d113", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ebe648fb-10ce-57cb-b0be-1fe2ac9216ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ef595429-2667-5abc-9d6c-5a195f4ccfde", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b54b6154-83b2-5f40-b153-71be9f2c4dba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3b4b99a9-1632-5526-b050-63986843d229", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:23815476-063a-5367-84fe-6a77a4efedd5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2f56f017-c58e-5fcd-bc1f-92c571baa8be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c4889088-cc96-5503-b856-3d360d537940", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4c50834c-94e2-5505-8c85-e979166d7605", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8f962124-efc9-5b4c-8efa-cb94e75ed4d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7653ef49-ce95-5920-8129-02bbc2126528", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:41eb6f25-f9ae-5806-901c-54c8f446d3a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3a74c650-4a0a-55fe-bf91-77303e6c2701", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:75bbad90-9ecc-51a5-99d0-56df55e90715", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5e2ee000-d41e-521b-9297-faed2c98ce1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ffddcc7f-8dc7-5ac6-934f-6d50438f72fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ba7f635c-a8f3-526c-9a80-cebced26fefe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b3dc525e-cd01-54b7-8f33-198c781972cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8990552d-6ca5-59ba-8cc9-fd627580ad6a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5ad54724-fd17-50b2-aa17-cc4ccabdc05f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b3cd4b28-4647-598a-934b-a8b27a0dcc00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6f03fc72-b3ff-56b8-8aa9-4f5d85d71700", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8d5c67f7-1c7e-51e4-b662-ce5034a7d2cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fe7229cc-a7d9-512a-aabb-da99378c5278", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c555e1ee-137e-5cab-b7f3-e0e886092a73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:882b77b7-7f95-540e-b460-d2fb38d9e1f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e5dc42bb-4b06-5147-8061-c79f1ee62041", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.0.RELEASE-tuxcare.5 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.0.RELEASE-tuxcare.5" } ] }