{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b390fe06-fe55-54ff-b27b-b2f9d298b10f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1", "version": "6.2.5-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:8b25407d-c920-5372-9d67-22059d85d107", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5da39fe7-74f9-5586-b28d-7344da0f1707", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:45ea5cb5-481a-536d-8565-0e8632460f24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:93cd77a0-d243-5016-b9b4-669f37384a3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ee7fc120-5876-50bf-81d5-d19e99cb49b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:cb7985be-aba2-5aa8-be25-f796b795c95a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:b60cf633-9401-5fa8-b9c3-5959c6a5ac19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:74e09b71-fbcf-5d2c-9333-b6ceda173569", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:1b8cb3c6-f464-5771-af40-081215b14708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:cf66a69d-39f6-56e5-8a36-7e07adc900e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f2eb661e-17be-5c5d-9dae-2f351d2e61ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9450951b-8ded-5878-a922-9503a73118fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2811b115-e82f-546f-893b-bbba3a5ffa20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f124699f-2f35-55e0-85bb-b9fb28ac1301", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:592a1872-1e82-518a-9a54-8a606bd3a4aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:fa12df54-dd17-53fc-8a20-0488c0a2977c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:4f8ff846-011b-5348-9bd7-3d5e2364cd48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:70675704-c77f-5fe3-8416-6bebb545d2d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:3c590d6b-632a-5104-8922-dfeb52777057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:adf37d48-18c5-5b5f-888e-a17f71a8611c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:82a6c8c3-c76a-5c57-bd98-f563d58552d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:53198ed3-2de1-5af2-b6d5-7f7bc6dd0149", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:65725acb-29bc-5f14-9ad3-32df07cdfd82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:82a7ee45-64d2-5589-afce-2279f164f0cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:1aebc610-dcd4-5b60-853d-f91daf9b30cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:5d5cc6d3-0a7d-5670-8e12-a20712313b4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:68e1213b-68e1-5c58-b6ff-8307e11b245d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:649308ce-640d-5a84-ac52-b8e2eff4f34c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:68f137d1-644f-59ed-a3b3-9eb59624e9a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f4fa206c-cbcc-5a1e-9f62-905403cd44f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:3503abcf-26b0-5c01-b55e-d035992ee3d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:34f945b8-8c9c-5f8b-bd75-40c1e48b7864", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:1b3a1afa-c1f8-51b2-a7e4-cd05143df819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:39197208-b7e8-5ff7-9be8-70b2999cd2b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:39beb133-0bb4-5760-8c03-e8c46f5e9956", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:752a1c3f-2412-529a-99ca-d805fdd37071", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2e2efa29-d6c1-5a51-b7ce-9c900893c6ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7d0bdb44-e6fb-5011-97bb-dd516af37142", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:700bbb6c-7e4c-5cfb-85e7-4f9d48625f8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e413cf68-0f59-5e4d-9f1c-f498fe81909f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:43a4a65e-40c2-560b-b91d-0b921492aeec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ee996317-2aa7-5b14-9a70-e89b0ec7c9dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ca300057-f3a0-5921-a6db-49b7847557c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@6.2.5-tuxcare.1" } ] }