{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:23a98596-313a-5f35-bdd4-853566c21d92",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-jms",
      "purl": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2",
      "version": "5.3.33-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:35b6dcb2-d8a6-5453-b626-9a2af417d8dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:12c8aac8-4714-581c-9b99-351cfb2544ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e5165e42-aea7-5798-919e-36850dd77657",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3ce9d371-9bc7-5420-ac6d-63ee9820c23c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38809 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8a1c522a-47bb-57a1-b9eb-401b6dae2247",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:dc370054-fae8-5a31-98bf-560726728fa0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2464e075-7e3b-5e23-9976-46c8896c1e07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d72cf62b-c48a-5f5a-bfad-ae0e8e8087c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38828 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0906c80f-0de8-5bfa-ba77-bf2516c9152f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:515e1d11-78bc-587a-9b3a-475645937c1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f3d2ac8e-42f1-5fc8-8b5a-2e7394762a0d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0817beb4-e8f5-56d5-86bb-9b8766f491bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3d3c72c5-bcb5-502b-a178-64084d08c074",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4c4c6199-afa5-5daf-a592-0f9bb13d86fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:de345b35-c38c-5b4a-95f5-fb1d7e79d32b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:64893de4-3dc3-5bf4-b2a9-0e3018d73f91",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e2f749ff-511f-57c2-ade2-676c930a5902",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1c244088-16c3-5f18-8ea1-4e5fb424ac38",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d3747f35-be2d-529e-9201-ecc706097108",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9ec352ac-d36a-5d78-b4a1-b3dfc7f882a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a95abfb5-2138-5319-b120-89539bcb267b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:32ecdc45-3902-55e5-9f7c-6bbd2e00a895",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0ef9b4cc-ff38-5edf-a7f3-70d8c0e37f64",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5ffafe40-3d59-5de2-947b-58c41b562b39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:17b68be4-2701-5dbd-b00e-48df3c04a999",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2ac115c7-f7a4-5ee6-95a8-d6469ec14f1c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d87bf323-79a1-5dd3-90ce-5fe15a6f60bc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7f61cac4-ab17-54a7-91c5-ae02f25a7fae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ab560c3a-750b-512f-9969-f22499ff836c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8ce2e84a-c8f0-5efe-be74-1c4445ddf925",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7dd6a917-209f-5d00-a02f-b08d56693d16",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3418a3e-b7f0-5745-97cc-6d7ea5be00da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f271b99f-7a0c-5351-9523-a01117c3925a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:196cf3d0-9561-5671-b437-1f031b117705",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:78d7e5ca-24b0-5259-b56c-cf1da8affe01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ee1104e9-f991-5d6b-9dbb-8acabe137fb9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ca178e61-aa8b-5c5c-9db4-f2e6dcba4d4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f1cfd233-d54c-5add-8ff2-f66378edce65",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:849dade5-5d61-5934-b6c9-6b8d011fe0ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a757e52b-7842-5939-83d1-d816bc37863f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:82ce8d55-4415-5802-bba9-7af71cde0a1e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:12035b2d-f192-5763-82bc-5073acc01253",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:02eb9737-c769-5ffa-89c1-04e1c2a692c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:07b00b70-a78e-5113-a74a-aa8cc3b53007",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:faf12d4c-e7d6-53e8-b53f-8221f9f7a8f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ef821a23-0766-5838-a8a7-6612455c8769",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1851d6e8-ea6d-5e2b-9db6-5e0727624a18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6df90790-13c6-5c85-816f-d77e46714d16",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.33-tuxcare.2 of org.springframework:spring-jms."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-jms@5.3.33-tuxcare.2"
    }
  ]
}