{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a2f1338c-6722-5460-abb4-ad1f011b5f7e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-aop",
      "version": "5.3.27-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:eba4306b-7849-59f8-a9f8-daa94b360b3f",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f38b4da-ce6e-5fdb-9cf7-55ffbbb23cd1",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e38f9de-23c5-578d-b52a-5d6aa74b608e",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ac2717f-bc53-5157-9a00-30c30fd953ee",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95527cfb-0b80-5a16-8040-f78a4769b71d",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:591d6f54-33ab-56cb-a147-77ea02af14f7",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:692237a9-a588-59a2-abbf-b528a3c5e322",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:131c13c3-bf6e-5b98-ad58-7c92f8f13f76",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:385f81ab-71db-5880-b4c8-0c3a5b2d22ef",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7af2b86f-7c4c-5f9a-8d1a-77a063b03327",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a726fea-a27b-50a9-ade3-83a4bc8e8959",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78353a17-fc60-521b-9d7b-7a8e6a88f881",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aop 5.3.27-tuxcare.9."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cab9cd2-de7f-581a-8a45-32f03af8addf",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07366046-2fc9-53ca-b7c7-5c871707165e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95252630-3e3a-5829-9912-dc4c269d5c7c",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:600eaa61-fbfa-5201-b389-e31e4cd0b8df",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5022123-0a47-5dcf-a832-ff986b8b050f",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96ca78cf-00a4-5e2d-8748-c6ec3960b541",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef7179cc-8804-5b9b-9112-bd45324b7a3c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0b7ef1c-928a-57f7-88fe-19e18114d492",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2570bc73-0cf6-50d6-adb5-f07967bb0432",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:123e9a2c-f78b-5e88-818c-9607b98f560f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f73db241-70be-57ee-befd-8f09dd626d1f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-aop. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b92f1b0-5d77-5b28-80df-aa4cd1618065",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07d4d385-2aa0-509d-91f4-ee8585b4b7f3",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4a5fd47-dcfe-5f12-9448-6d6d1a17897e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ea33b8d-0f8c-55e1-a511-5d8563d0a441",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f54a15-0f91-52d9-9db4-36c9118a68e5",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80172ae9-ff24-5d73-97f1-b7d63b6d7734",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1450d449-4cce-57a7-82d1-6d24404ae3b6",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-aop. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0134cb1e-7dbd-5d37-b19c-9b64d4c15e84",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73afcf8e-1f2d-5188-9473-329f72f8b04f",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a558607-39c5-5746-a52c-a66e755b669a",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8555697-48d7-57f5-a5ab-4a3aee0d6bf4",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3225e7ca-d443-5599-94c8-4b8637804d96",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb5ced4f-7b68-586b-b785-5030ad4c7158",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb1ea3c-8ae5-53ec-9bdd-c89b471211c6",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f2a35b7-6447-5732-ac8f-599cc6984005",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd861683-a5e5-5ece-9e48-42463735a18b",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1bcee67-064b-5b57-9f54-d08f9abf16f8",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aebcdaaf-7954-50e3-893d-446bffe5b98c",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9063f5d6-531a-5ffe-9766-798bb0ef8179",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d28a09f-2962-5c9b-8027-93d01e181689",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88d86c1a-5eeb-5cdb-87c4-02e771c1f1ae",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:395991c0-4f8c-5c9e-ad8d-43cd0f940bff",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:736fad08-8f5f-5b2c-ac7c-7170ecb1aff6",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f09c0cda-6914-5763-8e1a-cf835e4078ea",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3af4673-a2ba-5e37-857e-c0e3ae0d50ef",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e83fe3a-a5ac-54b0-98bd-4f713a99593d",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23cdbe23-ec01-5c07-9cb5-c0b7f1ebd128",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:931b1159-35a3-515e-9d72-0d4933c12137",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.9"
    }
  ]
}