{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0d6bfa25-4e1e-5a6b-ad00-614e4e433d41", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a8b1513a-1a3f-54c8-b747-702ee11a53d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1dce9f48-e969-5a59-a457-1bb417522146", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0bf92a64-4b48-58ef-9068-a36afecc2cc6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1fcc370a-6661-5d7b-8bc7-05d05e3d6755", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aabe8671-d736-5e8b-86fa-37fbfe8969f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab7435ae-d386-558d-95a6-7bfec0ddd362", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:22c4f95c-36e8-5bc8-b6e8-ad836dca272a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:59c0160e-ca0f-54fe-8c27-b0225f39709f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9579b16-fff4-5517-9805-f37b59afa14a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:905c0198-5272-547b-b863-0647408f9d60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:13ded072-8578-5032-bdcb-add786f70ad5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:36d35bc7-91ae-5786-ae19-0fbc9480ace6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5789e9b9-131a-5961-9935-722e45da9eb5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:436ff2fe-421e-5d19-aafc-ed97941e03f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:631de700-f2f3-5168-aaf2-3176d8d24764", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5bd6121e-5680-5481-ba38-c37d7cd8061d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6ac33fb4-b606-5d1f-8441-d5e2829d9b6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e95205d-f0d2-5d9e-a030-145912964f5c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:860f2093-ff06-52bf-87d8-d9193050e798", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5894e0bd-1730-507d-b50f-94fedf424e9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54acb0b3-da5b-5608-adf5-505328de24d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc31e233-b802-5747-9ad3-1d71f7b38882", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a55c404-6272-5830-adbd-7ea03caf2473", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6462c14a-c4f8-5cd8-aea3-14103a0b63be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b4b8abb-9259-5669-982c-48da8ddfe362", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cdeff446-8916-5261-bf41-bb4ffc025ba3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e7c9225b-3cb9-57e9-9310-d402223da1b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fec739bf-cab8-552d-9d28-eb9c6e2e2bf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14ed9f9b-8b5e-5a61-8b13-85f1abb338bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:31051c63-09d5-53a6-8542-31a69db20c6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d942c2a5-8969-58a1-b6e8-adf67a5089fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:da7e8c5c-bb2d-5320-9153-35fd7dacbf91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4fc8378b-ff80-587f-a69d-57ed4cf415bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f46d1b76-4687-598e-966f-e7ce1088a280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d6c657d8-21b2-571e-9f09-853a12f5cec7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:53b147fe-84f3-58a1-8d07-91d78a230115", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:796ae6eb-f9e2-5b8a-a7ab-58276ba571f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab218f95-6484-562f-a9fb-6e69f3dbf4e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5bf9e045-0ac3-513e-b3a3-487c8696a5dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b2e14e0-a390-57d3-8369-3a07a11396d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b7007d04-4c90-5b9c-9494-d607156cf293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fe108e22-db08-5ea7-a7a4-79acfea7e1a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a742616-1ebc-56a3-9ab3-40defa6d15d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eaefac6d-abfb-5e8f-bef7-c9da5a3445d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc26ecf9-e730-5c9d-aee5-cedfdfeda39a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5d50257e-4a46-5680-bdcb-9d37336d5166", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc105683-9a89-5914-a18f-63dbfd573f64", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4e44421b-6edb-5a43-a2f7-beb9c00fe826", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f01f9303-6928-5491-98fd-256b36b00b98", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9857f9ed-6e09-5c0a-968d-68812f482b0b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:311a0586-74ea-5988-a966-d1376b1bd298", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7083e7b8-e4ce-526e-a6e1-80f7ec091c91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1e9b52d2-aef3-576f-9240-afe854476523", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd74566e-9303-5097-a08a-4a2bf2a1faf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b0e17583-3286-543c-8130-3bdbed775570", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca679a76-c1f9-5c76-afce-914b0aebafb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:00a90caf-d824-5b58-a4f5-d3ce8482327f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.11.RELEASE-tuxcare.1" } ] }