{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c0fafdf9-aa9d-52c4-be2f-8aefbed2113a", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-aspects", "version": "5.3.29-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:cb27bd5a-b3b7-5a4b-aac9-a28ef5a052fb", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f81ccf7d-4395-5628-a97a-341e9ddd0137", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4bcf23b3-27cd-5b72-9e05-5b5559d73ca9", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:2f84feea-0470-52dd-a723-0ece327c6c8f", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:23c2aa3d-7a48-55dc-9ebc-0180c8fce810", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ecd4de4a-b463-541a-9092-36f63d92701b", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a213aff5-4439-5f38-966e-59fd9b894843", "id": "CVE-2024-38816", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0aa0c72d-e42b-5ce4-82c7-8ff72deefd47", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e2635950-61be-5699-8226-f745c3b439d0", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7433e1c7-482c-54a4-9b99-224e42b2a406", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d3e88cf4-c604-520b-ba50-6dbf6159a05d", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:644da158-38d3-5056-a6b6-e4c1973b78b6", "id": "CVE-2025-41234", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aspects 5.3.29-tuxcare.10." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e00b74fd-9a37-5458-a192-1c078ecd2c65", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:799936fe-c7f4-5c7d-b228-114509c215c8", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:60ad0218-5e9b-537b-86d4-1ffd1cefbb9c", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e04e8d1d-212b-5c38-a93b-7a31ad6e14d3", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:834f9d00-231c-571a-b81d-fa78e4f17bc4", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:cf90eb2f-7280-54ef-a0c1-a5616b76d232", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:372a5b5e-49cc-556f-a73d-b4b9abfbaa3e", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c6a5e8d8-dd58-5952-b8d7-9f1bc4edfd18", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:37ef6d50-d93e-530f-9654-cea4888daa1a", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d3ccfd7d-59af-5c05-bf84-0637c42eefff", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:79968073-fbf4-5a0d-9734-5a17847ba8ab", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.10 of org.springframework:spring-aspects. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9a42e898-c18a-5f2e-ae80-bd717cea924c", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:05d2e3a6-4f40-5e49-a99e-52db08cc8e74", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:db287dee-9648-5d20-a1ce-2de0146fb6d2", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9ebbcc0c-8d65-537e-af8c-43525e9c0128", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:72a164ff-7a9c-5229-b78b-07308be41a6c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:947bff35-6c37-5e85-9e86-97fc7d9328aa", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:aac3f704-d688-5e9a-bd23-22546e052717", "id": "CVE-2026-41847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5f362d3b-356d-569d-9c75-ff9684092f16", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:585030b8-4294-5c8f-b84c-909f35ca787b", "id": "CVE-2026-41849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3a743737-a871-5350-ac37-bebedc5fb37d", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9dc5ffab-c5f1-5719-8d1c-7069196407a6", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:958213ec-0d79-55c6-b5e3-2ec9426f8908", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e19b1593-fe51-515d-aa6d-7349d97457c4", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:76f4d999-7c4e-587f-850e-2d956301dad4", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e4eb9a8d-dba9-5b08-9964-bce8f9178560", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f6bb3c47-7732-5a24-b3ca-c4d9566f31f6", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:79f6851a-46b7-5a74-979b-6ebe0dd6c026", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:097fbbee-7f66-5aca-8233-e5abe7a87bbe", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f9993967-3ac0-5e41-99d4-2507e6d6493a", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bcdb1e20-ccb1-580c-8c64-1e2c8f1abb96", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d41843bf-9618-532a-876d-a3d830123047", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8895aeac-2b22-5ce0-8bf4-19a79fdac62a", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:eacd4282-884c-5317-abee-a011f84f9933", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:b09e9869-24c8-54cf-aef7-68a59dd43f20", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:20ecec7b-6f6f-5991-86b8-fb78db9a85e8", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:86964491-0398-5b1d-9cec-2842735f33c0", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:f139ec4c-459a-5df1-8936-659cf8cfb23e", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c84ae8b1-7350-5400-873f-130b171104c7", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.3.29-tuxcare.10" } ] }