{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0e7b68b8-696d-5363-bcf7-10db4205f838", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1", "version": "5.2.7.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:983df894-bcf9-51de-97c3-25e70c7f25f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7bf41b2-f5f9-5e4e-9e3c-5a76a07875ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cd88256d-a02f-5b20-9c7e-c51513e10bfa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:72028806-1d55-55da-817d-58a0008dbb35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b884cfdf-ab30-5682-ba24-5e8f182466f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4c901d32-a2d9-532a-88d4-9555f2b9e636", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e8f3cb0-f1f3-514c-84f4-fe34cde81307", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bcc3644b-1b58-50dd-ab2e-775bf88b7c82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dce33074-da91-5aa1-a103-8d283ffddaaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9fa61f3-e0d4-5c13-9c7c-c9bbe604d981", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c00f7520-e816-557b-9f5f-7ffad6d580a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:54885d4d-2d51-54a5-b412-fcddc9330907", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8cb950e6-03d2-5b3f-a8ff-b6210c92779f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0972b5b3-7334-5d89-8889-c3ceeb9e37db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:08b642fd-1257-52a7-a906-0dfa9e223388", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:996e83a8-cb6a-5a89-ab0a-51ffec6f0274", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba81aaf0-54f0-511b-9d50-8fba4a8d6886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:73cae948-1ff6-51ca-85de-8f448f624c76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0eb736a-9a0d-5399-88ad-73b5868b88aa", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging. not_affected \u2014 Spring Framework 5.2.7.RELEASE is not affected by CVE-2024-38820. This CVE addresses a locale-dependent toLowerCase() issue introduced by the CVE-2022-22968 fix. The target version predates the CVE-2022-22968 fix and does not contain the vulnerable code pattern (toLowerCase() without Locale.ROOT in disallowedFields matching). The target uses case-sensitive field matching without any toLowerCase...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b878306f-1f4a-503c-a6ea-2697c8bb1e5e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7196de94-d45d-5bef-88ae-cedd80dfc643", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ea08804c-2115-5d17-b8e1-27ba75c36a49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:330f0b1e-5863-5509-836e-f4f167b7f9f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:27e22155-1914-54fe-9b9d-7c2ddbc1cc16", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e18383ff-c0d8-551c-926f-433b1fc3ce2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e3ae8ee-162b-5cc2-8097-c57e8ce01510", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f3f751b-733b-5c04-ae47-2910b4485e4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9806c03d-d81e-5b3d-8ce1-411231e76f90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:71ff99d5-f214-515c-9f82-15440d0544a1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9c5be51a-b6e2-5674-bccc-047e2e45377b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14b5f091-009d-5126-8673-8040cf9971b9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3afba8b1-ef59-50db-8bd1-1db5b7938704", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c3bcdc73-373b-530e-a96f-fcc628b83b22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:18e14c3d-fbe4-5f03-96ac-b335492cf240", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ac9b8a2-caee-55bd-9528-a95947a869e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7bcd28e-53ed-5c2d-9d2a-b9e4dcbf4159", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c0734c6-d63d-551b-a752-c5fedde2f4fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:09175e3d-0d66-59d7-a982-b6a370f90aae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e7078a88-831c-538c-bf8e-6950e3cf9bae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:917b85cc-eefc-5b0f-b989-a5763455e51c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:71f6c6df-b1c2-5983-bcda-d4a9707845a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:df87d585-b5fc-5756-b4fc-1d5b245a00a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c877284f-31f0-58f7-b9ea-8d6015fcc43f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b744ff72-2292-57b9-bb04-f61a3138d5d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:21e1eae9-625d-5c16-8e1f-0e00107b7e79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a491611b-b82a-56df-95d6-1591fa28307f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7f2537eb-cc70-5316-a578-2006c65c0081", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94a96671-830f-53ba-998d-79c51a08439a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6cbc7d9-59af-5ab6-be59-330b999d604a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3e40a1fa-b662-50a5-82be-ebd101a9e97d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f69756c-4b81-5791-b9d5-323877084d28", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d0a7cdec-5dd5-59f8-b9d2-9d33d51bd7aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ec8fa54-e173-5de0-a69e-af6e11429719", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:68764dc1-acc5-5169-a926-55ecacf128ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86be2fea-26e0-5704-a829-08be124729bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5d878b3-fe85-5621-a100-9e3e0c2eb132", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8cc36d35-2aa4-57ab-b18e-fa28cf623db3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89ca3b62-f73b-5ded-86a9-1335b14feb4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.7.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.7.RELEASE-tuxcare.1" } ] }