{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:82b0ec79-3702-54c1-a702-a2b06a05043c", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "4.3.30.RELEASE-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:98774393-900b-5421-b774-85ef1722ef90", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:04fdc318-f1bc-5100-9fba-606e432b1ab7", "id": "CVE-2020-5397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5397 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9292e6c1-08fc-58ca-9d1a-38279ad6c681", "id": "CVE-2020-5421", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-5421 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms. Version 4.3.30.RELEASE is not affected by CVE-2020-5421: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 6327c60912cd80120040c8c16c3731d8bf6c19f6\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:be1d4060-6b86-58db-8426-1347fee677c3", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:73ba23f0-4d06-5172-9104-0de70b0c1ee3", "id": "CVE-2021-22096", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22096 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms. CVE-2021-22096 fix already exists in commit 4895b739b3e5fea63ecb01ac867c136add560cf6" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:be53d4de-4b57-5fcc-b90e-bd62d55f4ae9", "id": "CVE-2021-22118", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms. Version 4.3.30.RELEASE is not vulnerable. Summary: Target repository is Spring Framework 4.3.30.RELEASE-tuxcare.2, which predates the introduction of WebFlux. The vulnerable code (reactive multipart handling with predictable temp directories) does not exist in this version. CVE-2021-22118 specifically affects WebFlux applications in Spring Framework 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.7. WebFlux was introduced in Spring Framework 5.0, and the vulnerable multipart han [terminalized not_affected from patch_application_manual/not_vulnerable]" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a6be347c-53ba-5f40-94c9-14a3274d139d", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0c6946e2-4031-587e-ad5d-cf8b6cebe128", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f16021ff-4004-5241-8a6c-d7e9c1a5e54f", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:53ea4e9e-7cdd-5375-8a00-bddde732ec0e", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9098a74f-d3d6-5b6d-ab3f-6a1b03c1bd4d", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5eeb9202-6221-53d8-b22a-2b9c9c68b71a", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4f3859c6-2035-5619-8ce6-6fe09654a55e", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c75d8f83-fc82-51fc-9fed-8842dbb1518e", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:25adbb07-456e-51f2-a8f5-8e611e7dbd2b", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:989b6652-beba-5ef6-b463-86410cf0accd", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a2c7e9d5-dbda-562c-94f0-a63d7dd1b7d1", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0ef7edb2-586f-50d7-91d8-9c07175f6c1a", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1a43f91b-5575-5ff2-94ff-a58a0e62de39", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:035abe17-ab45-5ec1-9957-0f425efaa378", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:09ddd672-d1a4-539a-8aa8-f4f2621620f7", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:92fd5841-d584-5f6f-9c71-665091294936", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:80aa7645-5b81-55be-818c-5051b1edb352", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c0425c67-f982-55d4-b3a8-d7aff8c27a25", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:34456bbf-2040-56e3-affd-c351b113423e", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9986f958-a940-5760-a485-729fbcc93343", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:097a61a0-0a8e-53ba-8db6-517e9d1ca6f3", "id": "CVE-2026-22740", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms. CVE-2026-22740 is a WebFlux-specific vulnerability (reactive multipart temp-file cleanup in org.springframework.http.codec.multipart.MultipartHttpMessageReader / PartGenerator). Spring Framework 4.3.30.RELEASE predates WebFlux entirely - the org.springframework.http.codec package does not exist in this version, and there is no reactive multipart code path. Per NVD, affected versions are 5.3.x, 6.1.x, 6.2.x, 7.0.x only; Spring 4.x is not in the affected range." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6a8be14c-d13a-5659-9f8a-3d03ceae2cfd", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e44ed1ae-7641-5372-9bfa-9d4660f201bc", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:2615b8f6-9427-5d24-ba9d-99002b62e1c8", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8b7afa3c-1bc7-560f-9994-5f9b5fc2a49e", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:52ff0886-5f11-53e9-8733-7a719a7d86ca", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4542e952-75a6-50dd-b878-fd2d660a539f", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:80f404ae-25d9-5dde-87d0-cddc64db3f8c", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:34dff131-2f32-59c7-861e-85c98d7d4e37", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:fd2c1886-52fd-5875-a5ab-c14b0a3fb8ba", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:520c0d4b-8ff1-5529-9075-d13382a0aaa8", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:455eed0f-d7b8-55fc-b1ab-9f93bb063c85", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:535b2d65-025b-5894-ad94-e524adc9d9a0", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6a0d25bd-d370-5107-b181-328e041226e3", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:949886b9-e67a-5393-ade4-e6c404574e61", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f4d6dd5b-a8dd-5033-bff6-eec7a94274fc", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms. not_affected \u2014 Spring Framework 4.3.30 is not affected by CVE-2026-41853. This version predates Spring WebFlux (introduced in 5.0) and lacks the vulnerable component DefaultServerWebExchange.java. The vulnerability mechanism - Spring Framework's message reader selection based on wildcard Content-Type headers - does not exist in this servlet-based Spring MVC architecture." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cc9489d5-7e4b-5bcf-9612-f4270404cfdf", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a4509fee-fbdf-518d-a5f3-71fd16c7535e", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:70b14a6f-b141-53bc-b5e9-45661aac65bb", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:5071712e-3f10-54bb-8ff2-db245f7c69c1", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3de98d0a-89d5-57e6-ab6b-175cf5a9166d", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dee918ca-70f9-5501-a8d2-1d9384ace6cd", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4cc1ee19-f2c7-558b-9d78-2dbc9d772ae2", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:961342f5-8171-5daa-be06-d9b1b9f189ec", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0b022d24-323d-5935-b192-c0e17a7fe08c", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0b6fb5a9-bb49-5b15-9cec-1054c4471f20", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.3.30.RELEASE-tuxcare.7" } ] }