{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6211442b-c360-5385-ba5f-81bc86243625", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-messaging", "purl": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6aec88df-4cc5-5bd7-a171-b11a06204702", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:36625428-bdf3-5a78-abe6-91b1fae0927b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1399cf9c-e97d-519d-a0bc-567684171075", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6fc6e606-bc0c-5237-981d-408558185534", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d8a56812-e961-5202-84c6-2da2e765dd80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bcda5e36-c716-513c-b0d9-4aad98ea39c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:458af2b5-6b08-512d-b2c6-2ddd899f03f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1cdf9806-e899-532f-b346-b5c784fc70d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:57107e8e-a4f0-515a-ba25-0331cae0fcd4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f43adfb3-fa10-5bb2-9b6c-ccad9ad9a20a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ac3b2249-2f3d-577c-bcd0-293c6195a4ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2c7c38ad-6ce1-5733-9b17-fba01516ffff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9adcae48-5226-5282-b848-e3f5b43f88fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:adcfc315-0331-5959-8f49-d755590c1095", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:eb4eeb03-9ada-5e28-9251-3f64da0c6214", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8cbdbe5c-fd7d-5929-834c-57150665f7d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5313cd82-e4bd-524d-8e2e-994bcfe890f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:abe57046-43ec-545c-896c-1547846b92da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ca391f80-4ecc-5372-87a9-dfb173f9ce76", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:25d86f9a-8dae-5145-ab41-0fb60a70cc47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4fb43b74-38d7-5aba-9b70-784bfdf29318", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7150b064-750d-5c27-8109-73dcd1c30ef0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2e27a36e-54bd-5343-a353-c79c539473ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2ee19423-ede4-5903-813a-f7ceb8e2f674", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bca78fd0-9793-52b3-8108-9d5f637385d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ce9126f5-e8c8-5fb4-b2e4-d82f911a0932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:803158a8-2162-5a3c-b205-fc8495b1e45d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:25c2613a-190c-5c0a-9ff4-8b101ef5f980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:05fe7359-5feb-5ff0-a1f0-fc5595346c13", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:34127a17-266c-56ef-9292-a8f6914c197d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:01d32f6c-6737-5728-8c9c-4594ce5ce812", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:15172a96-9885-5839-86ff-102eba1cea50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5beaf172-6008-5261-b95f-353f5fb91e36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d26340e3-0c2c-5d05-94c5-1603f52d67bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:777b71a1-ff3e-5bcc-bfae-f288517e5a8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:273f9b34-313d-52b9-96c9-ee01cd3fc9f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1ba83a4e-9a49-5209-8e2a-ce404fcbac95", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3b2b170b-4263-5da6-bc52-4b64f48a5349", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:284f3423-72c4-51b7-b16e-bb035a64bc08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:92302304-0cb6-53ee-beaa-d27464dfc0ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e8b6917d-e888-58f6-ba80-cfd3a08c22e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2c2a9add-4263-54c1-926a-db564873434b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:95ed6123-bde7-50ff-9bb7-7dfadaa41179", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:07dc043e-3b60-597d-bd72-8a9a877879ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3aa590d4-3417-54ed-9b73-752f41c536b8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:54d868ff-db50-509c-b37d-06d87cd79238", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:87f26bf1-d90f-5d52-af46-ca4e85b96352", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ed3b40d6-59b4-5b2c-a98e-f378870c17c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b5a33db8-b4a7-5342-9727-04c5ed06c7dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:70ae5bcf-cce2-5b06-bdb7-5541611eae5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:913edb0f-64de-5283-9652-662c7c3d8df1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2dfbf1f4-e7e8-5a06-8486-33b470b77ee1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:831b0f73-932b-58e3-82d1-8adb0e6cd856", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1f5ec443-60e8-568c-9127-c3015cebc730", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:40735159-7ddd-5b3f-82f7-f70f36b549fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4d0c907e-7add-522a-9be1-602c9d6ef659", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:40def0fb-6a5c-5ffd-bc8a-bed5d7b335ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:549e609a-145f-504b-9eb8-c40ef1e167b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-messaging." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.2.11.RELEASE-tuxcare.2" } ] }