{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a5c882c0-4575-5f04-a995-80bbe5289dca", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "5.3.30-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:89ad7da5-c5f3-5b63-92f4-efbb51e647cb", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:620b6803-c225-5119-bf11-c7b8eb80dda4", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f182c856-72a3-526a-82e8-dc6cb2bcaf07", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d00da065-db87-5c29-8be2-cdcd37f47365", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2009a2ce-b481-50ed-b229-a59f7781336d", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:59e99666-de04-5426-868d-431deab59866", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a7fc83c0-aa56-5a68-821b-800e1f9b4bd8", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d90bf210-4d46-571d-870d-455a2dab1710", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2e61d5cd-eb0b-5419-87d7-3caad3854211", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ebeef3c8-eded-5365-b4f6-79e2c1006566", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f408ce16-4e63-535a-a607-3a0f8bcf8a92", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1d9d0281-8b93-53b5-9e6a-01553a4b7ec8", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:08e67ac7-90f4-5017-bf7f-6e4776353782", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2dbc0c34-fe06-5ea8-9f67-0cb3d7dafc7e", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4b105b87-de1c-5327-b31b-43aa1f6f4bf5", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:43d744de-cc27-5857-8e33-4f7d90955df4", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7e2c11ff-a50c-53e3-b08d-5be342dbfa91", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:11f7e3a3-21e6-5d03-8de2-0ceabb6a65ad", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3653883e-4c36-5169-8cbd-d847893739aa", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bc8c811b-d25d-503b-a71f-a067377a79f4", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5a8a95f1-898c-5a2c-86f6-7c14b25159cc", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:94a02421-5e8c-5927-b129-fab719ab8d2e", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.8 of org.springframework:spring-jms. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dcfcf119-1783-509c-ab1b-bbb6272c2234", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b8d92009-ec00-5cc1-821e-a5a513b9c45c", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:acb2cbb6-c0cc-510e-9343-c85a0a8375c7", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:84bee51b-52c0-5775-82ce-2caf6914d4d8", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:48c4821b-1fc3-5d20-a2e5-2242e1431eff", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8afb6b1c-12c8-5525-9679-4ab1700e23a0", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:28919e35-c6e4-5419-98b2-1b4fb4c5b045", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:00666b79-5c79-5b16-803a-67c478ff04c8", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ea1e6d90-25f1-5230-90a3-0f1f619cac1c", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6f3a7803-8dd9-573d-bac6-02b53af82679", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:29061da9-7990-5bf4-9b0e-b6d91c25d5d2", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:585846ac-a097-5939-ae76-31f888fb2f41", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:700d1b46-d30d-57dd-b600-ac626b14c0d5", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d95c6055-eebd-54af-acad-480bf275c398", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0f595dbc-dd01-501b-84c0-8fa63d3933c7", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b5d0d767-3e6d-5bd6-a6ba-cbbd0db772dd", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b8951674-e595-5d4b-b870-47a9562c77be", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6367e2ac-2046-5d6d-8c54-19cc81ac1157", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7402e1fe-b97b-5b50-84fd-209d634a2d34", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dd8dada1-f80c-55e6-96fa-1a8e0f76a892", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5ce013a4-ba2d-5798-9121-a379d1969971", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:592c349d-1eb3-5609-85e5-c40f5c4e4cff", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:454507b7-3c7c-5970-8fde-a7fc647cf81b", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7b6184c8-9450-5a16-8334-6aca9e5b450a", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8527fa21-4c09-57a1-98fc-8bc1a56be7a1", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e3835b87-7635-5c4d-8abf-9cb1ac4fb0a3", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ce59a99d-afb4-5f8a-b3dc-4ca258c208d7", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c6861359-e7cb-5c56-8f46-edb288ff5c3c", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.30-tuxcare.8 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.3.30-tuxcare.8" } ] }