{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:69401f94-b865-5e3c-866a-c29864a07c12",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-integration-rsocket",
      "purl": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1",
      "type": "library",
      "group": "org.springframework.integration",
      "bom-ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1",
      "version": "6.4.9-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-40987",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c2f53d8c-1d6b-5692-a83f-c55820428fd2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40987 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-47856",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aebdf00e-c801-5153-b8bb-3c8a429f7967",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47856 is fixed in version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-47859",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:317ce86e-f44c-578d-8286-bea4e501d4f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47859 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-47861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:84e1323c-3467-5e54-bd94-5659481480c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47861 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-47862",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5a0febe6-5c03-57fe-bb37-ca04bb13f431",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47862 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-47864",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:430d2988-6b95-5719-b17a-1361ea91afde",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47864 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-47880",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e23fe4f-eac8-5dd4-abd2-0c176006ceed",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47880 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59274",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fa86e989-2da5-5b12-930d-e4383315b14a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59274 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59292",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b49fffc9-3c8d-5a0f-a2d6-f631d2cd7856",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59292 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59293",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1a67b0a8-44bd-51f9-8cea-24185377ca42",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59293 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59307",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d86d4847-1f77-5f8c-a81f-1bc9c220b91d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59307 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59311",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a5664901-8c90-5841-87ff-3348a55c06b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59311 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59321",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed3698d7-6ef0-5fb6-9d7e-992cd45d2870",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59321 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59322",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0dfbed1e-fd0c-5034-b6f5-8321b62f4155",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59322 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    },
    {
      "id": "CVE-2026-59324",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cada958d-4a58-5fd7-a0f9-50c17a0b81fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59324 affects version 6.4.9-tuxcare.1 of org.springframework.integration:spring-integration-rsocket."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework.integration/spring-integration-rsocket@6.4.9-tuxcare.1"
    }
  ]
}