{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7a770003-f355-5e3a-83fe-c1be3b3464f8", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-messaging", "version": "5.3.27-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:49201505-055d-5f7b-8da8-7c75846c1f62", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ee22e8bd-e2cb-5132-8fdf-1f5c99567e47", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2b991a21-7b3b-57b5-9027-289a2e78fa03", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e2c6f671-cd9a-55a9-bc8a-c9f6cf5cdd75", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cd94bde8-2836-5931-8366-66a59593d5c2", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:490baefb-9efa-546b-a0c1-1713402baf4d", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c03cf0b9-34d1-5205-b280-114c869ddd59", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d29bf1d7-112b-579f-931e-b8eeca9dba93", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:60c68fe8-2ca1-5a89-8802-d5794d5ea477", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:922ee3bf-b2ea-5c94-af80-def519f9ccee", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cfb85a21-5cbe-5bd2-8942-8c8a49aa9509", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:278ed615-c353-5128-aab4-fdac486782fb", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-messaging 5.3.27-tuxcare.8." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:68232f4b-b177-539b-9f0e-5f4cea966c28", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e144e288-df56-5a4f-a132-e8f3476386f9", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9efd1ecf-0820-59d5-baaa-d42bad906f45", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4f3c97f5-5f08-5ad2-ae21-6ba5f73e569d", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b491978d-3706-5b2a-8f09-b65d918b83b1", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a45be1ee-b598-5c8b-98f8-5fdeb1a5e729", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dec5504b-769b-52ce-b268-818432b103f4", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5e582589-89a9-51d7-8569-d32d97e6fc4d", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1e54c3be-ee22-5cdc-b208-8ac5ed84144b", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:55385a32-d4e7-562c-be39-1dc0d56b1697", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:047b908f-7169-5f4f-a508-a9eb99eeec01", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-messaging. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9df55fb6-a571-53e7-996f-d534004414dc", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3e831fa9-9f09-56f3-95a9-ca30c7ceb2e8", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6338a0bb-30e0-5e80-a799-bbdd1e5946cb", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:da4b4575-1bb5-56cb-a99a-1eb8d7bb8a57", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cfdc5325-075f-57f6-9786-9a7a60333b8d", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5597d4a3-32ee-5693-ad8c-b19ca327f70d", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e3bacd3c-2928-5c2b-a5f0-ccd3e99bee74", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.8 of org.springframework:spring-messaging. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:82154057-2e1d-5a46-bdb8-023067a160a2", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:445be090-0dfd-5764-b78c-c4e4ca665017", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f4a42cfa-91af-5edf-bc0f-eb7fadc16fdf", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:79ed0283-d027-5d89-b88a-1554e6196a88", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:89d1d73c-6d3c-560d-937e-bec6e7d33da3", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c485c971-477c-5f4e-9e20-b2fe2a7748ec", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0310ffea-108e-5094-a606-cd12b8c8c1f4", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:96706ec7-22ba-5dbb-832d-7b007218ffd2", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:42c3202d-7e64-5a83-845b-b0c4d0e0334b", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bdb7fcdb-5e8b-50af-9c88-033b0ff35773", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f3859c53-ae53-5162-914e-9b7f56d0140f", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:77adc017-32cd-53b5-88eb-c367ece7b391", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f6ab89c1-5b0d-507e-b62a-83144fd28c8d", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:192e66ff-980a-5ec5-aa1d-e4967dc7299c", "id": "CVE-2026-47892", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3a19f5f5-4e99-59b4-b025-ee871c3b580f", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:412c9c20-d3be-5f46-aef2-29f33e75e49b", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b2c0bc6d-ca2e-597a-a606-adc2394b68d1", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4c3a6335-1c4a-52ac-97f8-6970567ee3af", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ff8c2bd8-cc86-55c5-b726-99f4f3cb48bd", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9ea20801-153b-5668-b460-73ae49fd7698", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:82d55732-e224-52b8-9530-66bff021411b", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.8 of org.springframework:spring-messaging." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-messaging@5.3.27-tuxcare.8" } ] }