{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:85de4507-f90e-551a-b0d1-729424dbcc0e", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-aspects", "version": "5.3.27-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1c82efad-8d60-55c1-a820-3c21da7460cb", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2a796085-ec31-5f1e-b55a-d41bec0dd0e2", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8b4b088f-37c2-5388-81ab-d23c53209b0c", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e1978d43-a70e-5b7a-8b27-b1c5bf150a0b", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7196eb69-2286-5648-9584-12baccd1deed", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f3c6b23e-f58f-592d-9faa-e6bcae2b902e", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6003d52d-3703-5fd0-bcd5-5b2b9c1ace59", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:899d8da1-734c-503d-92ee-1384a1092b08", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:13010ecb-135f-5cc2-bdb0-15f28154733e", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bec53441-b449-5060-9e61-5119876cc38e", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bc5c0e43-bad7-5d4d-872d-c1c96da0433c", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e31ebf30-56b6-5520-a1ac-5ab09d1b6283", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aspects 5.3.27-tuxcare.9." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ba631c70-75d7-5bec-a57e-e813c18e6d90", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a39af100-2cc7-5657-b119-9684852058a9", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1c0e122d-b33e-5c92-ba6e-f20761bfb5d9", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:01765e11-a3bf-51a3-b18b-18ca913a3d7f", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ff66ae4a-be89-52bc-b3c8-e074b4fed603", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f408d427-3d6d-5701-b52b-380ad3fdd31d", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c32fcbd7-36c4-5904-9e3d-dae67b8f2f26", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1af9aba8-107c-5108-a9b4-c37fe471eaab", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:153f8eb0-656c-57e7-8172-76855c867e4c", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:430b11c9-6c1c-56ec-a1dd-c3f9e6bde923", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:5d6cbb8a-ca8b-5164-b5ee-5c7a8285fc05", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-aspects. already_fixed \u2014 The target repository (Spring Framework 5.3.27-tuxcare.5) already contains the fix for CVE-2026-41840. The vulnerability was previously addressed through backport commits for CVE-2026-22740, which applied the identical doOnDiscard cleanup logic to prevent resource exhaustion from multipart request processing." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e1813633-74c4-565d-b133-224e337b2c92", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b1e776c1-663c-5552-ae69-9dc52d28f595", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b870366a-deb0-50c4-a9d8-e9306d8c5613", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:a85b8920-5cf4-5d2a-be46-ca1e61318850", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:9300930a-a11b-581c-a36a-19aae135dcbc", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4f568b50-8f83-5575-a977-d3abc3d74e7f", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d983a181-1dae-5133-ad20-c0563d06e590", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.27-tuxcare.9 of org.springframework:spring-aspects. All 1 patch commits already exist in target branch" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:7621997d-0ba9-5749-94f0-74dced25950e", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:446d2956-5c60-543f-bc1c-73a101e59e3f", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d1f08608-0482-548d-8105-f70392c58cd6", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1287540f-6379-59e4-bae5-e0f4e3709e17", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:4be3a9c2-62df-5ba0-98e3-966d88af7413", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:84a48076-ab5d-5600-837a-748ddc7c56f3", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c7402d77-e5da-563c-9642-5ec6bb2e3636", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d3c02e51-f9f6-5622-adb5-9f51ce329680", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:85b59ef6-ca04-5dca-aa54-46f3104d592e", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:67b150ca-6609-513c-a928-8d0f3113b89d", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:352a43c5-cdb2-5e69-916f-72c7e735c760", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:77de17b3-7ae2-548b-89f2-25ff348055fc", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ce9352bb-554c-5f2e-8145-3437e408c7b1", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d8da44dc-5f98-5702-ba0a-ebe311aefc5f", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:dbbccf38-8a04-5491-a7a3-edacb4040b31", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:10e7673a-0044-51d0-9d2b-b6a42f733d10", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:349e7e5a-ded8-5b1d-b6b6-a59bfed5d612", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6b2f0a68-3cc3-54d4-9aa2-40f781a6c240", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6ba3c7cd-26da-57a3-bc2f-285d1afb6f2d", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:fae5ebf8-e090-52cb-8db7-a6c3229aa703", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:445a23a7-b34f-5186-81cf-03c8db67ca44", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.3.27-tuxcare.9 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.27-tuxcare.9" } ] }