{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4f749170-51b7-5b9d-a123-81eec5184730",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-jms",
      "purl": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2",
      "version": "5.3.20-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22c51b97-acac-5854-8934-bee937ae596f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da480580-76d3-50c3-a8a4-3cb96e008614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7a01bbb2-ae0c-5cf6-b516-ec34a569129a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f214d526-ec38-56fc-8f48-47a49b5d9fb3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ace0cbaf-2f05-55ce-b449-00e8adb2ff49",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c22c67ad-3bca-5a06-bb06-09a8a2cdb396",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d96e460e-e54f-5dbf-b696-cd757ad1af85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:26df0c8e-b1ba-569e-abbf-c70aa74230d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d317572b-c60d-5cbd-8e98-767c3ec962a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d938f22c-4067-545e-a2ef-ff753a6b18e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82aeeae1-0823-5bb9-bac3-7aceb428ea87",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e5980672-7380-5db0-9e5f-b2530f87c7c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:066b008e-3450-5312-9fdd-8fd4590a68d6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:50ac4ed2-85a5-534c-bfc5-01a9550248b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:66e85b25-5231-5089-a862-ed95d93d1b4d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:066849ca-e9a5-5cb2-b532-98c6e39df8d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:78d80d00-4fa5-5f02-9ae3-b2b53c9cfe6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:291affbb-8611-5132-ab05-5f13b5ac646b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c8186327-3117-5735-a060-5b33f8b52243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0fbf731c-b8d4-5e83-b17d-f538f517203d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1b5f88c2-99c7-5eaa-ae34-b4ba3a34a262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b2543fab-8e84-50e8-968f-3ceae716fbb6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:83e2d127-f2c5-5cd9-8a4f-a915829bd5b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5dcc5a2c-70e7-59b9-abdd-ab39e2c640e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1fc2faac-6522-5331-a84d-2fe003710bc5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f7aba558-d251-5d31-a96e-5fe2435931e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1ce7fa60-d638-59c5-bc5a-099bf389b71e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5a7432f9-b49f-5dfc-b692-b684018a2f23",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:12e3fb07-29f9-584f-b4b4-1ff4d945228c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5524fdd9-4ed0-54a0-9327-ed116e7110f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7c67b390-b05e-5a45-aa6b-01e642323f36",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ba697cc9-6b9a-5eb8-91b3-e4de01299ee9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5fc96163-1ae3-5305-ad13-5dd1014a9c0b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1706b1cc-5847-5f92-a732-1d88efe61928",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b752e752-c54b-52c2-aa4b-6166bd98968d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c77a854e-c91e-576b-b1b0-cfce4db061ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7acb84d4-92e6-514b-aabf-7c7bab67a9c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:83ff9a9b-9c70-53c9-bf82-e31feeb30199",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8b6b2663-6a5f-582e-aad4-b86b722f40f8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6b2a5eda-cac6-5859-857f-0bd3ae9615ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:40165a18-cb6b-52d2-8459-129cbaca37c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d6fd7de2-2d6b-5a8b-97cf-665d0ab7f2f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:57d6116d-d34c-5349-a0d4-d75691405dc5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:618c421c-fba4-5792-bc20-1054ab995640",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:becd1d69-fbca-5868-a114-bdc7ce2382fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a6a19f2f-4be8-595e-b6bb-8c75daa33bd4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dbfd83e1-2276-5492-ab58-a52862abdd46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f8d85125-d13e-5af6-9c9a-385c68202715",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:20e7ba6c-81c0-53c5-828b-d5fe88df2474",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c06dba8a-d511-5d0f-9c31-85b5c34ce01c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9a92953c-d86d-5edc-b845-066d7282f0f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a3e771e3-e20e-5891-bd76-a2e1975c1f71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c1692e25-27f3-5f2a-a83a-9895ba906eda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-jms."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jms@5.3.20-tuxcare.2"
    }
  ]
}