{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:03ae8fe2-e4c9-5eaa-90a5-60594c1c91e7", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-aop", "version": "5.1.20.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:57d248b3-2e48-5d42-8d00-2327c9647c57", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:977acce5-c289-5baa-8040-e1d73a790eb0", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:be2e435c-5731-5156-9bcf-2d30e152a207", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:180c977e-1fb2-52a2-b238-8a7f20004d04", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5afff4e1-1cf7-5cc3-8ef4-6300a96ffb20", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:33ee200e-210b-583b-9ea3-445d3217d7ad", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:92235ead-7eb5-512c-8c49-a659f8fedd55", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d816eec0-1fc6-59ed-bee0-3e4d537d65d3", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0b5becee-f211-5fab-99c4-dc97db02a2f7", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:173a2dc7-e476-59c5-8267-c29cd2133a19", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e036d37-bb9b-52a1-bf94-738b05d10b71", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a694f5a9-1593-5de9-8575-f5f104afa151", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:418ad2b1-dbad-511a-84c3-4aaa04b26c29", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:eac5c4d1-3326-5325-8123-d56793ce74af", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e37e7c91-f315-525c-8415-6bda38d0004a", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8ad2654f-eb14-52c7-9d3e-f80b0bf32dea", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-aop 5.1.20.RELEASE-tuxcare.5." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6fdd67d9-2a62-524c-b875-be5f2416526b", "id": "CVE-2024-38816", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38816 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5eae78fd-860b-5797-b367-3467f6d7ee25", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f0992c25-934e-5744-8612-b75fdb70cc71", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:13da67a6-ef9d-586c-a25c-00ee13cd3ec4", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2e051d74-6d58-5f97-a2c3-9211a5dd9d68", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7865ee92-d398-58eb-8992-9cb0ba1d068a", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:99915954-de2a-5625-94a5-836ab24f2834", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:af596b8f-9e7e-5acd-ada9-bc030b858f48", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8003667a-44da-589b-b033-81bf653f2b99", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e774dc0f-89c5-5f3e-b5ea-7e37db235bc7", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4c9d377a-406f-5990-ba17-c716cbc5d0b9", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:54a98bfe-9447-5072-b32e-2f0b5bbdfc22", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:29216614-7f86-5070-87ae-111b25054c96", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:02c32d02-9827-57aa-ab76-023456714490", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:21cd8719-aabc-505c-9828-19de509bc12c", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ded85f57-c694-5af6-a7f7-4c0336a47f09", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d05ff6a0-b2d6-5299-821f-532b6148fa0e", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:85f08b59-b5f6-5dd2-906c-9260d2b2f5b8", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0f5e5357-1ad9-55e2-8ffe-2628108adb90", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fc31de4b-5729-59a8-85e0-3f117d8c1278", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f8e05b78-d5f2-5a99-a892-d2b319c178c8", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:92ba8553-f3aa-59a2-bbca-c13deead3070", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7702d32a-8018-594d-82a9-060350bf3792", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a8d39eca-4b1d-5572-92a9-3cc30dd8c598", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:79e6a89a-49f2-5311-8075-ba5e1769e352", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c12351ab-a900-541a-82ae-939a847fd7a6", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:1135a88b-11d1-572e-aa69-080263207179", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:961694c5-46ca-5b4b-95ba-3264d0a18704", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:175349e9-b7af-5114-bb77-e8bdf08a6be1", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:36f1274d-abae-57e8-8496-9003cc5ecd15", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:020f2631-34ee-53a9-baf6-75ecc42d0b14", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5572dbd3-38b7-5fef-8079-62a8f2684999", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:39050d99-703f-56a2-b65a-e37166956f5a", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0a2fc1a8-1f19-5b9a-93ac-c0aaea42db6f", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:037bc798-bb53-5bd3-9a55-c57d4200d2ad", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f74ebe7a-36cb-5425-bd1b-fd9d14d87861", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4b52baaf-a866-517c-b4ca-ba44cad882e9", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:468f8234-0af8-5fd1-b343-07d42fa1bd83", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4005e3bb-db1c-5d19-b57f-7523d26ee4b4", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:327f6e0f-b342-5c9d-b1a9-26c0674617c5", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.5 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.5" } ] }