{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:f5eca858-7cef-5f78-91ef-b71456e1e9c1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc09f2a1-7c84-58d1-9702-3ccbab2bda6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1c1af1ad-8251-593f-a830-c3ac0ddb87fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8bc0b141-2c75-5a3d-bc81-a28dc813e7c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4233806c-a582-5560-8b29-27ad7c42da9b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c74c892-c6d3-5326-851f-6fe34eb8e104", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b6195b8c-a98f-5bf7-9ce2-a4ad4b024dc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b62b4013-c74c-5cef-bcff-76bd95db7604", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5d39fc27-c0c3-5f46-9ff5-dcba3d5449c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e85f2db7-836e-55df-8560-5cf22416f7d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4e7e7d3c-e98b-5fc1-9ba1-42a5afd4140b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:132adb9f-ebba-5b11-81ab-ed797dac8461", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23d03465-f587-5de2-8ab2-cb1002ad6760", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3054eebe-4265-549e-bd21-82a18c114469", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88d0fe47-8c0c-573c-8a1f-502362cc3cf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10939def-1aa0-52f8-8b5c-1c686b536712", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:91baf3f5-5f7a-59b9-9cdc-3c440287e38c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b921f8ba-52f7-53cc-a1dc-8fffbdd2b848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:099bed3b-8774-5430-a82a-251ac98adc8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:38f2533d-8f8d-5f02-aa35-a563cc2c5ac6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:98074da4-f093-50c1-b27b-45c424ce4073", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:576b28c3-e592-5ee2-9134-1dbf5db2f07c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e502a4d-66aa-5fb0-a9a5-80f08ce80066", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a119b802-4589-5a24-892a-0e2651c0f23d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b315a30f-59ea-5a0f-b7bb-0f8e59c4d155", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a0dabff-5379-541f-a00e-f076da8bdadb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23697cad-a9eb-5623-940d-72fc73f2ecd8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:408f8429-c606-58c7-98a0-d9b15c7e4fe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a2ac9b28-4d31-54d5-815e-cb89df2f46bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cf86b753-0b4d-52f9-bcb2-856e988b27b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:738d56d1-b2d5-520b-a3c4-ee22ac111774", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3f52c073-7363-5c63-ae30-b6856af315ca", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:47196f23-af94-5edc-a4db-e6333a2cf5ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0afab297-3278-53ec-ae8a-bce75f7fe2bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:05338031-f3cf-520e-a8ac-f6f210e51782", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:096a0229-bc9c-5047-a823-ad77c755a675", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d1b77f36-b8a2-53b8-9b81-771ef47562b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5c68f0b8-a11a-5811-aeb7-c652b69b534e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:62ade790-22a5-59a1-aa82-392b705faa90", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b2687d3-e569-5a74-9a3a-e8a2226c2047", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ce681875-3760-5b20-b23a-00bfe80f94e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:24196be6-ba0d-556a-bd86-085474647e10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2044e5ca-277d-532e-afa1-ac198b2a8158", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2caee4e-289a-501d-976d-ddeaaff00dae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60805441-4e50-5188-9574-d3748668ab2d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d367a58f-7744-5bd2-b72a-4235381fa211", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f1cd6d34-990b-5711-90fa-d6fd8a2eacaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7cb3c600-969b-5e3b-8686-03d7da363541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:16046ec5-608d-5d30-a585-ceea1782449e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9f4e83ac-3c84-50c2-97f8-e57b48f0c5ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f51000c7-6a33-5aa2-93fb-1446914691e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:86b057b2-1ee8-566d-9ed4-be5f778f29e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b1121dab-58bb-523b-aea7-5448a0f9bedf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:07f1c6a3-43dd-5460-8445-985ddaf656fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:42866ff3-06bd-56ae-a3e0-2abb83d81958", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:81d9cd06-676a-52c6-9858-00241e27b0cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0dd50fab-ed5c-54df-8060-f025023e93a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0cffe29b-66cd-5278-981c-2e37a9d085cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dbfab1e7-f6b6-58fc-ad54-5e4d98f841f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.10.RELEASE-tuxcare.1" } ] }