{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:01f0a8a1-01e1-5e8a-aab7-d7467c3c39d8",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-messaging",
      "purl": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2",
      "version": "5.3.20-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:57935741-e5ee-5bc6-adac-4205f6df88d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required",
        "response": [
          "will_not_fix"
        ]
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f4111a8d-777f-5eda-b03f-440093649078",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ba0cc121-231d-532c-bd79-4de69cdb1c17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3aa014fa-d5d5-5f2a-bc7f-f9958f4d21bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f47661c6-93ec-5ac5-b9ab-036a200198a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:52ea4b09-6025-589d-99d9-3eb1d6f26d2f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a076ac41-24d1-5ba3-91e8-caa06e7ade62",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9d0ff2bb-882c-5a30-b56a-4914e086d119",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:baf446fc-3f69-56a9-ae94-b365373ba498",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0955f02c-a691-5561-ba5c-b0af3a6b6d45",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8ebdcc38-1f42-55bb-bd5d-b0ac6873d69e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3e362e01-3147-5277-868d-9bcd2d2df401",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:15f5e0b2-d944-5c8b-932f-745e3c2ed27e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f09a20d9-e523-54fc-aecb-c65e495504a8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61569d31-a81a-58e4-a97c-b318ac11158d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0776f458-f300-5f4e-8da9-a4eb90b086c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c9cb6f79-dd34-5ca9-b8c4-4fd886d52e2b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:63ea41f9-e593-53c3-9f5b-82d56f7e68f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd3fa809-1998-5f4e-b0bc-61671bb4f850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2192af7c-ecb8-59f1-a07a-956f07657334",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:918e0c9a-9d83-5f3b-a4cd-9013113f478c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1fefeb28-c7b9-5b9a-8480-0457202a98fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f8f34dbd-5c21-51d2-bce5-a96154f449de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f81c21d7-ffde-571e-b245-0b034e65ec17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22940687-848b-5f1d-ba0a-d23b7e7a856c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b9d36fc7-dc9e-569b-93ff-6c7ef55d5661",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a359a30c-144a-51fa-a7e6-82c49008577b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a2d22e86-3851-5b58-9125-aeedf10c9ca3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:03e4d3af-3376-550a-8385-f55d3c1b0b5c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:01ddf8fc-1238-5b91-953e-262bad28b5f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fefc5958-62af-5efa-b64d-1b73e1dd4472",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9b5a4f82-4ba0-5c08-93c4-a77ca2aa261c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:29cd2a77-70c4-51e3-8f2a-7d0445519ad6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cd64aab5-8ed1-501c-8a91-9eec1abd702f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bae2cb8f-9b50-5d72-a78f-3763f99496cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a8bf6d0c-2f29-5258-9442-00aa02eb5bbd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f5298278-478b-5016-a9be-c49f3dab04fa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a19bd5c6-de12-5825-b9de-2675b3edbdfd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:75ba0daa-05ff-5cf8-a92c-ae39285c57e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8f1b5cfc-2912-5b93-ac76-e5597f0d5e7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0d43cd24-db70-5fad-93d0-9f0a1fa4c9c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b55f7486-3e3c-5457-b026-311c1b9c53f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:539f7228-3e1a-5dc4-8e93-19e9a3d3b07c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5321e59f-ca9b-5cb3-b5a0-ad877d7232aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:71e761af-1156-582a-ae14-82e15854df51",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8996b0d1-2871-5d8d-ae4d-2269dd1d4d4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1de2e935-14d8-53c9-b324-360e19df666e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:37574db2-cf6e-5a2c-a876-a057d5bd284d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b0ddf318-c691-5da0-9f8c-635af8eb2757",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8d43654f-749a-52ac-b761-e1992916d647",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:023ea2eb-c9e8-589e-8741-03744210d3e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:755fd2c7-af2e-53e5-bfce-3da2b7945f57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:92a5b21f-ddfe-5962-9a77-aff57bf1e3f0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.20-tuxcare.2 of org.springframework:spring-messaging."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-messaging@5.3.20-tuxcare.2"
    }
  ]
}