{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5e1b9cb2-7d1f-5b16-8370-cd8640c22062", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8", "type": "library", "group": "org.springframework", "name": "spring-aop", "version": "5.3.24-tuxcare.8", "purl": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:b9de3c07-b65f-5f22-bf4c-1116163af60d", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d2919863-10ae-5ff9-9f3d-9a34f67217cc", "id": "CVE-2023-20860", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:efdd7eff-5c22-5640-9530-2c6f22718502", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:84a22d93-7581-514b-b08b-9dee5dd84b0e", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:dc2af6c4-9233-58fb-a110-b7355e9a041d", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bc2cbfc6-ea19-5e31-b2e6-be1ed82db85e", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:86de6a88-03c4-5a10-b841-ae6e063987b2", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9085ac3f-e9f9-5281-b418-24059e79dc55", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:580ad028-63ad-5fde-b1be-ba21c574717f", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c9ce3c62-69e7-5da7-89fe-f39815ccace7", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a5856291-e412-533a-8719-93c5186adb45", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a01cb8ca-dce1-5a8a-818c-680a1460cdd9", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0fa1e502-8af8-5b78-a9ab-30757ec8f55a", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:3fd534b6-f33b-5aeb-8d83-d2ea2762ab3d", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:73ce6e06-ef62-5708-81d7-1141cee2a1eb", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d9464af0-40fe-5a45-9120-fa5b9bb2ee43", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:18bbc13f-aa5d-526c-846b-a5b60a365797", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e51d4a83-1fa5-515f-be28-08c2d9ff61be", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9ead143b-3851-59eb-a59e-cbe95b6a998c", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a94cbaa1-ee0e-56f1-8249-1025b98881bd", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b9f2d257-af33-52fa-b401-ca750fa01f86", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:4b5d4325-9718-5aef-b5f7-39bafa77894d", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:85b9bd9c-4991-55f1-a423-fdbdff6af9b6", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2d4dfec6-e890-5605-ac91-27567107233e", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:551d14b4-3d92-584f-a320-abf94167655a", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring-aop. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9a3a5d0c-e42b-50e3-a0c8-47227a1c401d", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:40ddf1b3-46eb-5810-8478-dffd16859a9f", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:17167828-ab90-5e0f-96f7-1a06f57242cc", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0b51d94c-cc6b-58a3-a333-83604de30458", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a5af9e37-1b67-520c-a1cc-59cf09d36e97", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b49d49a3-cc66-5463-b584-74e4c41c583f", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:be3f7cbd-8d70-5482-b493-960400923c3a", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f0f2d235-2fee-5ab5-9672-994100cae5b4", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7552e31f-a2da-50fc-a6df-d27e7cf9f0cb", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cff3730c-e3ec-52c7-90be-7321aba3da71", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d875127b-cce6-5c59-8a95-cabad3a3cdec", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ea0a852c-b528-5cc8-93f8-cf1fd1971bd9", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:eef50ba9-9ab1-5018-8f53-26a4c8a755c9", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d78cd614-39df-56db-a4dc-2b2e4c54a6b7", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9606d9c8-8112-5fd4-bf67-ac6b675f28af", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5584d574-8556-5769-84d8-5bc527688d1c", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fac10895-a9a4-523f-8ca3-b0ff10fe8504", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1ff5a292-8120-5a4e-8a31-63ab388323ab", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:78388027-4290-5e2a-8eab-cc1e0800d64b", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d0f1c9f6-1d48-508a-a21f-32c0d5ffa3b9", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b42c66cd-787c-5022-9e9a-149b1282ce98", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:8b3e594b-93ac-5280-9d9a-f1561624b0a4", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d5e1381d-1c70-5a8f-8116-3e67714d8c1b", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:44a7534f-c4a7-5427-a603-939aa08f037c", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:cd104ccf-7b95-58c5-8e66-2b5d9b142f40", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:1476207d-aa50-52c6-9b52-0fc991a8d4b1", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:58602bd0-2fe4-53eb-84db-c38fa80452e6", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:62462f48-6bab-5203-b2d3-b4b278718f4d", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.24-tuxcare.8" } ] }