{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d1b620b1-2409-5ed8-80cd-9935fd04ce6b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13", "version": "6.1.21-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b2461a8f-d4c5-5240-95d3-26427e448c6d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.13 of org.springframework:spring-jms. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1e5e687b-e7c6-5699-af2f-1ebf9981b0be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:db2e3ae6-7cf8-5d19-8fb5-93297f328cfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:fd228b2a-2143-5cb8-babc-220d1342a667", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:58a2028d-1102-5efc-a852-57fdda02ff08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:374837ee-3ee1-50bf-a4af-417b90ba813c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:56aa4c08-1c1f-5b46-b0ee-d26bcfba1c94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:32cfce8a-89e2-5666-8447-fb5242e8daf3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4f41d221-06fb-51be-8af4-50152df67ad2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:741c548d-0cfd-5477-9dc6-6167baf33515", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1866541c-3846-55bd-a576-6aac4d47b068", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4cba54b1-d249-588c-9abf-b57d11d07ffc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4da57f32-d9d7-5579-8959-8afd8841ebb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:25135bd5-0a7c-5653-8285-74fc1b896efe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:040eb0c6-dfc8-5c73-b087-a9f2cfd30377", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:2a73e129-f1ec-517d-b27d-a1cdbdb1587b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:7472f788-c897-54a3-8959-348eaaad97b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9895d9d7-51ca-594f-83db-c142a895273a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1c0eaa27-503e-5578-a8f0-d09bf0776480", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1ee4200f-b61a-55d4-8803-cc6bf3022f69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:dddb0731-24ba-534d-a89b-3eb6ac8c9155", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9fdfb74c-3630-5cde-977e-16c9d0ac437f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:991a30ac-bdad-5615-b774-31dff2b43ccf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b5b2e525-d29f-5aeb-b88d-691b091ab526", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:25c3907e-663c-5e25-bf1d-977778a715c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a00d0552-4a3d-5c72-84ee-2ee00e3c7c17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:69c9dd46-0c78-5a25-8f4b-a528dca5d890", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:ce8481ba-a746-53ee-a625-2888d1d4afa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:463ae73f-23c9-5f98-9ed7-5cd291cb4c26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f6e0a330-c363-58d1-909e-60dd75900ae2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b2ef5c45-cb6b-50d6-ac40-df833cc653af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:7d156184-bda0-5fb5-8df7-3ed0c98c69b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:8c6693bc-89cd-594e-b9cf-406cb0f1147d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:444242d2-51df-5e1b-a3e7-5b67ac4f8969", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f9860ce3-6e79-5cb8-9e80-805bde4d8588", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b7b91daf-b7a5-5fc3-acd5-9391fb22c1ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1c9a5a3d-ffc8-5779-8091-fdbb8cd31daf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:96242977-9fe1-5539-a697-105d33af1fac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:fb4a3f06-595c-5906-8038-18474e64739b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@6.1.21-tuxcare.13" } ] }