{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ec093ccd-85e4-5d14-9376-d89bda2244b9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-jms", "purl": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3c9ae025-01db-5908-b1ee-45e21c23c946", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d3e90636-337c-5085-ad88-8b5abd3176b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:859f3100-8f28-59dc-bd2d-7cfe858dbd4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c6cf98c9-0da3-5d51-a245-7aa6dab81444", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c40b3963-ec78-5941-ab6a-0cf261c922d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c132b9f3-567c-5886-a7ae-adfa23496d10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:42508a9d-f9a4-5973-b5a0-c6abc8938c5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b0505cc2-b7bc-542c-9cae-522ad64b6a88", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1533af8b-70b7-5b5d-bfba-85c34efddd93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:197901cb-d33f-53ec-9510-2cd691e8a2c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:46181e37-bffb-5df2-9759-63158134a519", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4b64969f-d7ed-586a-8c01-946ad02703a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:755da018-e94b-5dcb-9533-66621cd3d43a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:82ed4d85-4564-59a3-8ddd-d723bcb91389", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4c62e6eb-fe5e-5c3c-b6f5-267257adc7a0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bc348ced-cf4a-5633-9fbf-944921ceb388", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8601cb34-e12d-5024-82b8-e1af087248db", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-jms 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ca419b99-bec5-5277-b913-3c371ca9c0f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:4f76c719-fa7e-5d43-8865-12d146056b35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d23bc327-b80d-5195-aa6f-454d25fa9daf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2cacb471-df29-5199-97fa-4ee48a6b21e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bd535178-9008-5d3c-a01b-a4ac63f57747", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c4fc838c-b353-5e71-a2b4-ed11918922bb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c3b1c023-8e3d-5fc9-9496-59b113a9de16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3d4e9702-ff73-56e5-9746-1b0a3ff84c4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8b92c353-b10c-572b-915a-10d8bc3cbfba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a821253b-711c-5e5e-a766-76e9779129ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:75007580-3662-53de-8c5d-832da058f216", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ab523373-d91b-5c19-9a46-2c5db6a36868", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c9aefc8c-d362-5a8d-bed3-b4a7915c1789", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3133b83f-2f12-5458-8058-88fe567b5a7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:630c1dee-3f02-5f84-82db-c6a0b8d5fdc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7ed10ed5-8ab8-51eb-b955-a75cc489a942", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6e680c43-7dc0-5a89-89cd-e4b9e22bcd06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e4ab014c-643e-5e57-8ffd-5b84e12d288f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7ddcee99-41e3-5124-b7df-4eceedcdb016", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0c578c11-920e-5978-81ba-89367fe8800a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6383ce1e-7ba0-5143-bb26-ae5dac13d5be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:39926431-fe34-5b4e-8d2c-8df4f0d0dd4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0114f91a-0506-5e17-bb53-d4328e2e7426", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:17c721ff-919f-5b58-be5e-d8151b10b6d4", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b5f5d6d4-98ce-59a0-89f0-26aeae30a612", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9e740d5f-2da3-51ec-8a23-9c41c567dfe9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f35172ce-6fc9-5d01-897d-b9e59f61ef9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0edf0b4c-45b7-5771-b002-2a9c3324744b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a784878a-3f05-5389-ae47-b7688231c18d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ef74ab93-c8c4-5531-9a02-68a69684ab95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:546edfa9-12d2-5990-b524-74123ef9fb22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1271e48d-e856-5c50-81e9-ed12cce63b9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:42de838b-bf86-55a8-a702-fcfdd31c3234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:613f72bf-5746-563f-a696-c652b9269480", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ac3e5552-1fe7-5f8f-9111-8e172d3e3b61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e2d4a9bf-21cd-5457-888b-8681964faf6a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8628c760-1778-5161-bfba-40512f75c97e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:86e23b19-5307-57b6-913c-84d510d3a7ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d97d23a0-6f8b-5e1d-8139-c26274756db3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:930763a1-4a15-572b-8e1c-2a9a9c276b00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2dbbbfdf-a7ba-505b-8e28-9a0967dc5ef0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3eac83c0-8179-54ae-b0df-4a640fce7ca5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-jms." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@5.1.5.RELEASE-tuxcare.5" } ] }