{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f4687026-5462-5c0c-869e-a32cd1b8287b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-websocket", "purl": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1", "version": "6.2.5-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:683a272c-8cc7-5d22-9f6f-d030d57472a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:0b4c7caa-c4f1-5797-a609-9f5d93eba5cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f7e7b0e9-6f73-5232-9544-048a219d13f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7d8d35d3-97fd-569c-8854-3e1c772566b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ae823155-243a-54a2-8ad4-b2dcec746ba7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2ef87f4f-5f74-5402-bcae-ea1ec4ae2763", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a9b0d82f-40bc-574f-a0b8-6038356bf91e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f159d337-433c-5d4a-93b5-dd5ce4dcae38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e8952195-78a4-5cea-910b-75e37d264848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:0bc57e7b-14af-5828-9206-327d16d9ef97", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:78cb6699-a521-5dcf-a830-e00c174cee5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:fa8c8ee1-1b09-530d-9ae6-499a03444f3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:9a153d89-75a6-56d6-81c2-3d6f5782f48c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:f8ef429d-ec73-52e8-9bf4-cd5ab217a103", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2d1e40b1-dc7a-5afa-8041-80e59cdd8d85", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:e768ff05-8c15-5a5a-9bd9-1ccfb0b876e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:01910bc7-c9f2-5538-afad-4a95aa3f05eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:82471ff5-9488-5abf-876a-79439f41c14a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:34bdd09f-ac1f-599e-a6ff-1dfe79ea678a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a3d48a25-dcfa-5b91-8c9c-781025d2440c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:051a9030-4001-57b1-b8f4-d33313462524", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:cf4a8c61-a9a4-5425-9817-428a06f4502d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:7915844d-e12f-5dda-a947-881a3b7a983f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2cfb55ce-7348-5528-b099-431e5368040a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2c636cb9-123a-5350-b204-2044c2e816c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2588b5c8-8384-53a0-86fb-3c9ff5c02a25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:1fe2aaff-0e9e-5bba-b6f0-0c1e8ae0c4e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:07a2f99f-ae14-5604-a1bd-8f2c3435e3fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:06502ca5-09e9-588f-b44c-53707a1d6402", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:aad3e65e-3765-5cc9-b145-2ce2a7604aea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:a4e25708-5218-552e-b8f2-bb2d96cd7471", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:619b4e00-4b4b-5256-9a4c-7fda02054465", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:2773c008-155b-5eee-9a1d-79a2d4b0b2fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d748a755-b86e-59d8-92f9-48694bbe3be5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:0c00b2c6-3256-5330-955c-e2b337f595e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:c8f55788-18e5-53e6-aa54-bd0396831178", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:d7a79534-e016-5d04-8d64-927304220c11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:72617cbc-2a2e-54a5-bb30-fe90410db0f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:1ce852f9-5b40-504a-bbd8-2514c7b7122e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:18c642d3-4d7a-58f4-916a-bd114113e380", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:ad3db0a2-6122-57ba-bad6-a4c2aee8b712", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:871ed3a6-503a-56eb-9358-66f677eebc18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ], "bom-ref": "urn:uuid:06e45c6f-1125-583c-892e-e4e6e1c1810e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.1 of org.springframework:spring-websocket." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-websocket@6.2.5-tuxcare.1" } ] }