{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:665ba779-b370-5c5f-b18c-738cc4d10c6b", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21", "type": "library", "group": "org.springframework", "name": "spring-aop", "version": "5.3.39-tuxcare.21", "purl": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:3538e66d-a283-5f96-96d9-3ab76ca242bd", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c534a13d-e529-5cce-8df6-1410bef121a1", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.21 of org.springframework:spring-aop. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:5276a20d-02e1-55a4-9161-56bdda8714be", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:878e6a8c-08b8-50a2-b736-87f0658d31b3", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:8ebbf1cf-3c48-5616-8f2b-7eb32efeb646", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:33a27d89-ecf5-5e20-aade-2b870e7e398b", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:db8333ce-d004-5522-a760-4c1942bd88d3", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e5f8163c-1aff-5e69-9485-85c5948e8d39", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aop 5.3.39-tuxcare.21." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:002b2608-2917-5796-b8bd-71b5d86650a8", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0c5d8430-f85e-5694-a80a-33f6f07504ce", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:9ed64fb3-9319-56f6-9562-78f6d35617a5", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:168026f2-1505-5148-b00f-9298acf61a14", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b0f54f59-60b5-5da4-9ae0-a7cafcb5ba5b", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:3c0de0eb-7355-5dae-bf71-aa10627d5a28", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c9f5e3f9-23b1-5d28-a654-33a2abb2d8f6", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:7fc2be4f-5048-5e3a-8a78-3ccce9715080", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1a56d55b-18ba-5f80-bdc0-a72d63a0d8b0", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f5b3caf8-e6cd-5063-b3e8-260f4a3cb0bb", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:892ab141-aa99-5174-ac91-cee64f8c4258", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e1e10557-4a55-5c60-bcb7-8c76ad4e6c81", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b5dee321-16ff-5184-b9b4-46c4498f170e", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:62e7313c-cd50-5c0e-91c7-b33485f62938", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4d1b7a9b-26d3-5430-92c2-6f446c56785b", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d9453d23-f888-5ca3-9c3d-9f7c3dd41c1c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d4550610-9d96-5173-a9b8-d405d6f7f2c4", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:62a01591-ed59-554b-9847-ac17835c9044", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1f982a47-9743-527c-99d6-f7600d6563a8", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:713b8ed4-4374-5033-badb-588d72c31c10", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:492f8645-f443-5c9a-a9af-de7ace6b6f76", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:0473851b-c4dc-5c52-a791-2730ffe59f38", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:2a306b11-d92b-527b-b079-a93bb2a9b242", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:ad9c529a-3fce-5fe9-a769-a940f9be9dc6", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:75e3e4fb-862a-5bcc-8fe7-8fa7c13de39c", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:85cdeeb0-e35d-5ffc-aaed-ee4c0a26a3ec", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:c0bda521-2efd-5234-9522-7c1aba5523a6", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:83836085-4ca1-5b2b-91ab-795272628a74", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:f8d957a0-2139-57cb-b532-ab5e188848ca", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:4e42c1b7-02c4-5f74-80a6-e113d5a94de9", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:10b2ad84-e452-5f9e-8abc-b548d7f03361", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:1194ac1f-b49f-5b50-b057-3066d0eab859", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:b8dceca1-4baf-52b1-8810-b9e907e420a4", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:3b92a3db-5492-5654-ae04-737cfa190293", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:a7b5db4a-4bac-5b7a-bb2a-e43bbaf089af", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:e2067c60-ff5c-5de1-9644-224161ac3075", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:69109063-2a5b-5e2c-a82f-054a5f0e06f8", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:783b21fc-e2f1-59f6-a0f5-40c643e752b2", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }, { "bom-ref": "urn:uuid:d7b7eb61-d1c5-5b24-9ee9-d9b554996672", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.39-tuxcare.21 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.21" } ] }