{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c523f90d-92eb-57b7-a138-5d6c3c2254db",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-mqtt",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1",
      "version": "6.4.9-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eb09ba80-1205-553e-9f26-8765a412c3c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40987 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:761d4673-bdff-5ec0-ac28-76187a7cb744",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:36637175-0219-580f-9d7a-33f22f8ffb5b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47859 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6c1d52e8-4244-509b-adcc-32a972400ef5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47861 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8557c1ba-03ac-522f-a40f-738b7ab1c28a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47862 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a2b168b2-9181-5911-ae85-c964cd395845",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47864 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7bf1f41b-046e-5f33-bf84-a7409a9457ea",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47880 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c8764649-eaa7-54b6-99db-995d51a7387d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59274 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:88c7901c-8a05-52bf-af67-f937674dcdf5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59292 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7fbf9993-fff4-5232-8530-870805ca7c74",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59293 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59307",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d6fa90d5-a6a2-5dd4-b6eb-4fba27d9435d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59307 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ed6bbd9-f3c6-5d78-bc9b-04f0dade525b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59311 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5bd0b071-f98a-5e82-9a13-d6a60feda7e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59321 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:614ac00c-c98c-5edf-a5b3-56973c4f27b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59322 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b5c13d94-0c2f-540f-8912-5d9ffb92b6d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59324 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-mqtt."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-mqtt@6.4.9-tuxcare.1"
    }
  ]
}