{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:92a7cd17-7357-5a09-9484-134044a9eba6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10b0f2da-dd66-5b91-98ca-bd00cd629b5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6bf23042-c76e-5075-bc85-76756e7d0695", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55403c49-7aaa-5599-88e7-ba2893d9c000", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1187a555-c3e7-55c1-98e5-eeedb8dca200", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0b933eba-599b-5b0b-8f88-d225c0020c5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ff05f513-3f9b-56d5-a0fa-2e22e4092ec9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dc85aaa7-c62d-5722-8445-3cea8a2beb29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d2277148-9f5a-510c-8ee2-bcdd3f86c286", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55480f8e-75ef-59ac-a442-e8a1835b25d3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0021b61-dce5-511f-958f-5ac2b619033e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ea88972f-257a-548d-91c1-7f84b1532d1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ba1b6c0-8ba7-54f6-9ac2-346e8c8c6b09", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2149f3c3-1c81-5a8e-a77d-8d66356140df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5177f2f5-b068-5d08-a4b8-7d636991d834", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c1b64d32-ca88-5ecc-ba76-ec2faa0ade20", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a5f308f3-75f1-57bc-b0eb-6005cb0983f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7e21849-688c-562f-8136-ccf2208d7fd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db2cb591-2ab7-581b-bf64-edba9f7739ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:789b0bd3-e7b8-598f-b6cd-e7cdfb19807e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:113ec4c4-5c92-5248-9005-cd5b53a49cdb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:567bb121-2f19-5ab9-91c5-24a94bffdbcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:913646ba-badb-5db5-ba5d-a3cac6f208df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47e2ab9a-107f-5535-9880-80b43a44074c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ebe7027-077f-5fb1-9336-a0ab4ce957fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:caa90210-44c1-5075-9f1c-6529e925d383", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c2ea9bfd-5599-5c67-8c96-751d7d7ff9b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4aef5850-eb2c-5807-bb36-4d14165eb297", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e0895252-20a7-51bf-8faa-194a1d138ef5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89d682e5-9fbc-5254-aec9-aeb0d74da450", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e855111c-d822-51a8-8869-31a11b5f58b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03f835be-4cb5-5318-8671-82d569d5052d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:db4d32b4-7f0c-52f0-9d2b-6a5f622e29bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9cd15871-ed12-5973-af55-11b293c9f0a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e8ffdbcb-f21b-5020-b7c0-cf39f766c165", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c29be585-9f0c-5072-ba5b-4fb0dc6c4468", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b71b86a2-0fed-5868-a252-c741f08ec427", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8cda2d73-7d8f-5fa1-8745-40a8e3cf13c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:488c792e-688d-53af-9f10-f56428deaf1d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9e66af93-685d-5d5c-b1d5-6d81886a9b63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1925856c-9138-5233-9643-8ab45fefcb08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:956f24af-042a-59d0-b8a7-24110a90057a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c1ccb05-e31f-5b58-98f5-7984ba2b65e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e3bde8ae-d2a3-53bf-936d-8b8a84f67a31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fca11d01-9dae-5cff-a091-44048851f0cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ffe3ac35-628c-5d42-861b-e6f299f1e80c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52b31f5a-079d-5f16-8cd5-f136b7c64ae8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bebe693a-a8dd-5dc1-9f17-e37019d86e80", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e8b54927-121c-56c8-9ec4-08fdf09afdea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5de9d8e-d0fb-5b96-8cb4-4e5a909f6786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62cb14dd-d2fe-5db6-a6c4-6dbcbbfc4c64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bdaa0c49-af3c-550a-acd6-973164cca46b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9e08e63-a487-5da4-b677-e8798e48c1be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5a4090f9-3814-5d37-9ddd-e38f58e52734", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f3395a60-bf1b-5346-bb68-009b6b7fa337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:897540fe-9a37-56c1-bd5e-3e66f64eff91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d01c88d1-c4a4-594b-8197-6239809da8b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3615111f-8c25-5900-ba83-5169d2a77c69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c8dbe180-4443-5896-ae09-dc9d87376128", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d80045b2-147e-5025-9303-0900c51aa3f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aab2c3f3-d568-5389-9b87-04ac0be58ee0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:840014e7-ccc9-53e6-b004-d7cbcce85a9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.2.8.RELEASE-tuxcare.1" } ] }