{ "@id": "urn:uuid:7091106f-8b49-432a-ade1-7420eef712cb", "role": "Document Creator", "author": "https://tuxcare.com", "version": 1, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-09-24T09:31:26.931840+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2016-1000027 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "vulnerability": { "name": "CVE-2016-1000027" }, "action_statement": "Vulnerability CVE-2016-1000027 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required" }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38808 is fixed in version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2024-38808" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38809 is fixed in version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2024-38809" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38816 is fixed in version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2024-38816" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38819 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.6.", "vulnerability": { "name": "CVE-2024-38819" }, "action_statement": "Vulnerability CVE-2024-38819 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.6." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38820 is fixed in version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2024-38820" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-38828 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.8.", "vulnerability": { "name": "CVE-2024-38828" }, "action_statement": "Vulnerability CVE-2024-38828 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-22233 is fixed in version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2025-22233" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41242 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2025-41242" }, "action_statement": "Vulnerability CVE-2025-41242 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41249 is fixed in version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2025-41249" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-41254 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2025-41254" }, "action_statement": "Vulnerability CVE-2025-41254 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22735 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.5.", "vulnerability": { "name": "CVE-2026-22735" }, "action_statement": "Vulnerability CVE-2026-22735 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22737 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-22737" }, "action_statement": "Vulnerability CVE-2026-22737 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22740 is fixed in version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2026-22740" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22741 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7.", "vulnerability": { "name": "CVE-2026-22741" }, "action_statement": "Vulnerability CVE-2026-22741 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-22745 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.6.", "vulnerability": { "name": "CVE-2026-22745" }, "action_statement": "Vulnerability CVE-2026-22745 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41838 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7.", "vulnerability": { "name": "CVE-2026-41838" }, "action_statement": "Vulnerability CVE-2026-41838 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41839 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41839" }, "action_statement": "Vulnerability CVE-2026-41839 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41840 does not affect version 5.3.37-tuxcare.4 of org.springframework:spring-jms. already_fixed \u2014 The target repository (Spring Framework 5.3.37-tuxcare.6) already contains both fixes for CVE-2026-41840. The fixes were backported on June 8, 2026 via commit 648b33d0a3 as part of CVE-2026-22740 remediation, which addresses the same multipart memory leak vulnerability.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-41840" }, "impact_statement": "already_fixed \u2014 The target repository (Spring Framework 5.3.37-tuxcare.6) already contains both fixes for CVE-2026-41840. The fixes were backported on June 8, 2026 via commit 648b33d0a3 as part of CVE-2026-22740 remediation, which addresses the same multipart memory leak vulnerability." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41841 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-41841" }, "action_statement": "Vulnerability CVE-2026-41841 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41842 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41842" }, "action_statement": "Vulnerability CVE-2026-41842 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41843 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2026-41843" }, "action_statement": "Vulnerability CVE-2026-41843 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41844 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7.", "vulnerability": { "name": "CVE-2026-41844" }, "action_statement": "Vulnerability CVE-2026-41844 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41845 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7.", "vulnerability": { "name": "CVE-2026-41845" }, "action_statement": "Vulnerability CVE-2026-41845 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41846 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41846" }, "action_statement": "Vulnerability CVE-2026-41846 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41847 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41847" }, "action_statement": "Vulnerability CVE-2026-41847 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41848 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41848" }, "action_statement": "Vulnerability CVE-2026-41848 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41849 does not affect version 5.3.37-tuxcare.4 of org.springframework:spring-jms. Already patched: all patch commits for CVE-2026-41849 already present in target branch (momus prerequisite AllPatchCommitsAlreadyInTarget).", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-41849" }, "impact_statement": "Already patched: all patch commits for CVE-2026-41849 already present in target branch (momus prerequisite AllPatchCommitsAlreadyInTarget)." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41850 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41850" }, "action_statement": "Vulnerability CVE-2026-41850 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41851 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms.", "vulnerability": { "name": "CVE-2026-41851" }, "action_statement": "Vulnerability CVE-2026-41851 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41852 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41852" }, "action_statement": "Vulnerability CVE-2026-41852 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41853 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41853" }, "action_statement": "Vulnerability CVE-2026-41853 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41854 does not affect version 5.3.37-tuxcare.4 of org.springframework:spring-jms. not_affected \u2014 Spring Framework 5.3.37 is NOT affected by CVE-2026-41854. The vulnerability exists in RfcUriParser (introduced in versions 6.2.x and 7.0.x) which incorrectly accepts malformed IPv6 URIs like `https://[::1]resource`. Version 5.3.37 uses regex-based parsing that correctly identifies the host component, preventing the SSRF outcome even when accepting the malformed format. The architectural differ...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-41854" }, "impact_statement": "not_affected \u2014 Spring Framework 5.3.37 is NOT affected by CVE-2026-41854. The vulnerability exists in RfcUriParser (introduced in versions 6.2.x and 7.0.x) which incorrectly accepts malformed IPv6 URIs like `https://[::1]resource`. Version 5.3.37 uses regex-based parsing that correctly identifies the host component, preventing the SSRF outcome even when accepting the malformed format. The architectural differ..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41855 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9.", "vulnerability": { "name": "CVE-2026-41855" }, "action_statement": "Vulnerability CVE-2026-41855 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47884 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-47884" }, "action_statement": "Vulnerability CVE-2026-47884 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47886 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.12.", "vulnerability": { "name": "CVE-2026-47886" }, "action_statement": "Vulnerability CVE-2026-47886 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.12." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47887 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11.", "vulnerability": { "name": "CVE-2026-47887" }, "action_statement": "Vulnerability CVE-2026-47887 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47888 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-47888" }, "action_statement": "Vulnerability CVE-2026-47888 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47891 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11.", "vulnerability": { "name": "CVE-2026-47891" }, "action_statement": "Vulnerability CVE-2026-47891 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47892 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-47892" }, "action_statement": "Vulnerability CVE-2026-47892 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-47893 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-47893" }, "action_statement": "Vulnerability CVE-2026-47893 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59280 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11.", "vulnerability": { "name": "CVE-2026-59280" }, "action_statement": "Vulnerability CVE-2026-59280 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59281 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11.", "vulnerability": { "name": "CVE-2026-59281" }, "action_statement": "Vulnerability CVE-2026-59281 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59282 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11.", "vulnerability": { "name": "CVE-2026-59282" }, "action_statement": "Vulnerability CVE-2026-59282 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59283 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-59283" }, "action_statement": "Vulnerability CVE-2026-59283 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59313 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10.", "vulnerability": { "name": "CVE-2026-59313" }, "action_statement": "Vulnerability CVE-2026-59313 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4", "identifiers": { "purl": "pkg:maven/org.springframework/spring-jms@5.3.37-tuxcare.4" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-59314 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11.", "vulnerability": { "name": "CVE-2026-59314" }, "action_statement": "Vulnerability CVE-2026-59314 affects version 5.3.37-tuxcare.4 of org.springframework:spring-jms, and is fixed in 5.3.37-tuxcare.11." } ] }