{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8363d8f1-39f5-53e9-892e-5ef9bb0aef28", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23", "type": "library", "group": "org.springframework", "name": "spring-aop", "version": "5.3.39-tuxcare.23", "purl": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e091c935-9d79-5c56-abe0-4758288acd15", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:ee67e427-4c55-508a-9e33-e81255a4648f", "id": "CVE-2022-22968", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-22968 does not affect version 5.3.39-tuxcare.23 of org.springframework:spring-aop. Spring version 5.3.39 is not affected to CVE-2022-22968 as fix has been already already backported by the original developers" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:10bd6c97-4be2-58c4-b994-66e7c6ace840", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:1ee3238d-b948-571a-bebf-2f12d0ac19c6", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:8789d120-a4e8-5012-8b7b-011f0cd8e598", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7a43e8d7-c5d6-5778-b266-89ec95917b42", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:fd0bf3d6-9854-50f1-828a-f858b9c5099c", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:87314099-e968-5c27-a91d-034e2eb3365c", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aop 5.3.39-tuxcare.23." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:fea03baf-a728-5a97-ad64-a354741aeb17", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:812b8ae2-fb55-5fad-8df8-5996ece5d4d7", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:66b82e5b-b14c-5c56-9ae8-60323bfaff0a", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:6428927c-21d5-560d-8d46-3883af07ccca", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:99b9cbf3-39f9-5428-9ae4-41a486b49f08", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:0215c187-4d0a-506b-b217-a1ab90b2ca3a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:8e25bd2c-14c6-51c8-bca8-588ee93e3775", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7f0a150c-bb66-50b5-a39d-22b80a181e2e", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:279b6704-f9f0-5981-a1e8-ff1e87e85a8e", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:cfea4ea3-0f64-540a-85af-b9659c0288a5", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7354c2c5-7ef2-5a01-bc81-b5d78e76c67f", "id": "CVE-2026-41840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:be939557-0298-5d3a-83c0-a5849190237c", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:9c9e97d3-6417-5e98-9ec0-cb3d8b737807", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:16d4e688-11a7-5f30-8c33-8a9b99f7e887", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:49f539ea-196b-5224-958b-06c50b5f18af", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:644ad9cf-22cc-539b-aff9-c0542a2cf135", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:ac237d0a-1698-5ead-a751-d00e010a13b7", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:5feaf919-4f8d-55a2-9974-b948497f6027", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:eb71244d-396f-5274-9cb4-75772210e038", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:bd4c1f14-776d-5a22-bde8-54cec523251c", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:e9f96917-65c2-5702-aae1-286645421772", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b7f48e00-1863-58d7-b1b8-a87d260a190d", "id": "CVE-2026-41851", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:669a33ff-1a6d-5d63-8894-b0b36b79e783", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:835ff205-7ae3-5e76-8762-1320dc156e33", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:6dd02469-9ef6-5760-89e9-1b972b6f47e8", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:0a7c616c-00db-5e1e-b9d7-75f45bbe314d", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:0e7d855e-340e-5cb2-8779-716f0a7df3f1", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:72e03f8a-3546-5b27-a3a2-e69539364ae8", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7e9ce14d-fa54-5ae8-ad1c-9cea4480f366", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:bd8a7846-d44b-5199-8dff-9734869af95e", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:b124a5de-9b95-5546-8d92-16591387f089", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:c9cead12-20b1-5196-8e3c-50a6f0168e0f", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:e00a4b1b-57f9-5855-b881-2351dc97016e", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:5e8ac86b-b29e-5701-926d-ea92bc0491b4", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:afdd5a1f-6389-57d1-bb85-77489d66d166", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:c35f2311-ce00-5125-b7b1-b0f571eecdef", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:3b262e9a-06d6-5828-a1d7-bb5532e98f67", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:4eda692e-b127-5112-9baa-dc3e9dca3d12", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }, { "bom-ref": "urn:uuid:7aa4425b-d070-55bc-8e43-4d268e77b957", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.39-tuxcare.23 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.3.39-tuxcare.23" } ] }