{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7d278979-a2a0-5f78-8c35-16f29abe5d81",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-aop",
      "purl": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1",
      "version": "5.0.0.RELEASE-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-aop",
            "purl": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.0.0.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:93c1aa8d-d603-52c2-b090-db20cd45db15",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2009-1190 does not affect version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 CVE-2009-1190 exploits an algorithmic complexity vulnerability in java.util.regex.Pattern.compile in Sun JDK before 1.6. Spring Framework 5.0.0.RELEASE requires JDK 8 to run (sourceCompatibility = 1.8, per build.gradle lines 114-115, and README documentation). JDK 1.6 (released 2006) fixed the Pattern.compile algorithmic complexity issue, and JDK 8 (2014) is well beyond that threshold. While Sp...",
        "justification": "requires_environment"
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4db57f74-614d-52b0-b884-6ad87e33bf97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74a96389-23d5-5893-b297-82a44e97f599",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1f03bbf1-400c-53e5-ae4d-508aff2c8563",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c8d3b77a-0267-598d-ad12-d3aba87a3854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9e3dfaef-eeb4-5a3b-beb5-b81b66e69d58",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d6a88daa-cf9a-58bc-8706-580d0974c89f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83877225-96da-5db7-a8b7-63d27c76008f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f751e01f-a7d4-5126-bceb-38d8453ee91b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:43507c6d-5043-5775-bf63-06725c1b054e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1257 is fixed in version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d379b09a-cbcb-5a37-964c-05c713b7e416",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7ea3e911-a802-54c1-881f-685a511ee89a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1271 is fixed in version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1a955a1d-b4cf-5383-9d6e-9f5a8998dd47",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-1272 is fixed in version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dcd10b6f-7785-5327-9909-30af92b310eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2018-15756 is fixed in version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:04816b8a-e2ba-5980-ae10-6fb2a72313dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:67077545-22fd-59ba-aff2-a614e94414ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2022-22965",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:20019fb8-b1a4-57a7-a22c-88187299ef2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2022-22970",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d06cd0df-df47-532f-8cf9-0d5afc86cce8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22970 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0b880fe-d322-5374-97e6-32039188f009",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0334585-db4e-5c25-acc5-64483c845f2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b411e90-88bb-5f13-b200-5da5e74f58b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e7729643-df78-55fd-92f6-25b16c58eb47",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.0.0.RELEASE-tuxcare.1 of org.springframework:spring-aop."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-aop@5.0.0.RELEASE-tuxcare.1"
    }
  ]
}