{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b09bcf56-715d-5ae1-802e-8b509dd01675",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-gemfire",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1",
      "version": "5.5.20.tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f4bf8e97-bfdc-5666-b2da-c468e601cb43",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40987 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire, and is fixed in 5.5.20-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:20479fd3-61ff-5816-b5c1-d547198138f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47856 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire, and is fixed in 5.5.20-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:67ebdcfe-3118-5825-ac04-8e0b508900df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47859 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:538f6003-8a5d-50a3-b6ee-e2d25fc0556b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47861 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:50a62d08-1ae6-54df-9a9e-813f3767f521",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47864 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire, and is fixed in 5.5.20-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4ff5e967-9a07-5bfb-84e8-ea0c70b3e75a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47880 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire, and is fixed in 5.5.20-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ac3dd8d1-7d8e-5aa2-b876-0d6f35f9bc8a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59292 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire, and is fixed in 5.5.20-tuxcare.6."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1091b1f5-4ba1-5995-ac35-9ac5e2821c0b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59321 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6821c0b5-e40b-5ad9-b7c6-bdf555e37c9e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59322 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4759c90a-ca0e-5e87-bbdd-81fc96b51339",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59324 affects version 5.5.20.tuxcare.1 of org.springframework.integration:spring-integration-gemfire."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-gemfire@5.5.20.tuxcare.1"
    }
  ]
}