{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:96013683-41eb-59b8-9d6c-23fd28db7c7d", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-aop", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:75cb7475-3027-5587-81de-397d54220a40", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-aop. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:73457272-90db-5ef7-a2f8-b5a035505455", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:73ad9cab-3e62-562f-8aee-8c7055628b37", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d0c90a28-9605-5334-88ef-2bcc4ae0a67c", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e83bad00-2e8f-530b-be7e-563c55ff754c", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f1803fb9-92a2-570a-ad77-dc1ac72cdfa7", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:643cb1c3-710f-5aa7-8dad-f4d0428ade44", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7f63a914-7b92-5fcd-b544-3e2a710002ad", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3ac79780-1190-5d51-b831-ee3f21fa1a8c", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:65456856-55e5-53df-aa80-d9ee14265562", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9e9126aa-e82c-5bbc-9e59-f1259eb30602", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:15500828-a008-5cf9-9928-5b7792afbe45", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7a2c5e17-1d05-59d4-8339-e41b513f3792", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3d36412e-83a8-5c86-b961-5d8cca81bfbf", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e6451af2-0a56-5f03-ab13-1c9293402a42", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6455f8c1-c6b1-5354-a9fe-0df068327f2d", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9604d37d-b3d3-5c4f-bd6a-e7431d7125a1", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bfba380c-911c-54e0-a60d-5f5bd846adf6", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8793b35d-85b0-5731-9a2b-4a9acac7ea4d", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a701503b-6f7c-5ab8-aab4-f5a80ccbd739", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9345c2cd-69dc-53fc-b32b-6c508bf6f66d", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4da0ea73-51db-5e55-92aa-30e4cd125a47", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f4b3fa2a-6de5-5fa8-abf0-5412a4707bb2", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:884776e0-ccfc-5791-aa90-8a27088d8998", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9111fcc7-7575-5fbe-ba93-1185c71b010b", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a2eac731-880d-5228-aaf0-4da45e4f2d4c", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:68e4a093-4899-5da7-ac52-d5fabb36ce24", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:468420ae-dfa5-5cfb-8be6-a948aa966daf", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2bf68b5e-4e46-5a68-b254-2ecdedc488a5", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:24234ba1-5282-5b69-addc-3ef450d72dcf", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4a779d60-a1c1-59ce-bf14-15acf52bf680", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0901b8c9-95c5-56bf-8115-9201b99f31b2", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4fca30cc-d6d1-5d5f-b4ff-6779abf6fe85", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9c97b1a9-7ca5-5128-962b-feb0263966ab", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:fd60b364-aad9-50de-b68e-9e39432d0e06", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cf830d5b-e5ea-524e-95ca-1bd1c80ac1c8", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f895f3eb-29a7-5901-a96e-fd9bc829e51a", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:943adc45-1b28-59cd-9d08-3913e05cab5c", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:938259bc-8a8a-5259-985e-5756ed27b1df", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ffa68049-c7b1-520c-8e31-ee99351b64a4", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.10" } ] }