{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2f9b4ca4-2b44-5f8e-9eb5-e727bc4428f6", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6", "version": "5.2.0.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:38da9da5-50c0-5c07-af38-8c6775cb4cb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9501b810-ed81-59eb-b074-815621b29b28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5397 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9c7613b5-b769-50d7-8462-4e9fa9f174a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fea826c8-0c5d-5bbe-9755-c18d86ea9dc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1933064f-0440-53b5-8647-f7c1271de117", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bbc15d54-be05-5e38-a822-570d2860f180", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:df95e19a-5ec4-52db-8cdf-388faac0c9f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cb78adc6-c1e9-5b8f-aa8b-5c85245b8ff2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1fc40873-591f-5a4f-8fe9-e807de3544ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b369eb46-36de-5028-8bf3-d9a0db99387a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e579fe52-561d-55ed-b63c-3dc55baa5ba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2341b74d-3786-5ff7-ac26-a8861ad76af0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0428cb91-51e8-546b-a69e-814a9ea0e1aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:398c50aa-00f0-5475-8420-fbd342473717", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ad41d2d5-d1ab-5b91-bbfd-9fab6fe744ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0c6837b2-6a30-5e0a-aeed-ecb68cc4a358", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6a3bb5f1-5d35-51ec-9a2e-85b8d0cfed6d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:eb0d5ff9-6376-5e9d-a39d-b1dc54d8c79f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6bad590c-a232-59f9-bee8-23483b22ba84", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-aop 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6b800642-793b-587f-9eb9-4cd0dd006d21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5ee7361b-1497-5575-a022-52f2d80ed58d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:96781642-f468-5426-911c-68f5e604de3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2d54118d-5b2b-5cf9-bb28-88d09b64ce46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6545b4d3-a3bd-529d-9e44-bc68b48f69d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6a68c9fa-c835-55fa-8899-bbe829695418", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2025-41249 is a false positive for org.springframework:spring-aop 5.2.0.RELEASE-tuxcare.6." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:00ce1486-66d7-5c80-a084-d0aff8d0511f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f9c956dc-83cf-57ed-ad2d-f899dd5174e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:85d6cd5d-0a69-5d07-ac2b-fd791f9e3ed1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b904e832-b94a-5a7a-a2fa-9dbef32f1d38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d05bbe29-d866-561a-93f3-8d50249f96cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e747ece8-f538-5c3e-bf38-cebb2f5acf84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8b169ab6-f6f8-5f37-8c6b-85cafca4954d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4fbd97d3-0b70-5b6d-a822-6735e46fa450", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:de2a07bb-fd0d-51da-8871-fd87fce06929", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:42d910df-ab7d-53a6-aa18-87db0b291933", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:816b625c-0d4e-52be-ba89-f4516560a249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:abb0b7ff-5327-59c2-9a9d-c2e2c7a4f5ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9083f04c-9169-57b7-b82c-62d352268b5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:88bacd47-935e-5fd7-9900-c8c28442e04f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8c038e5d-3eb9-55fd-889f-267cd401467a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:09e2f84f-148a-580f-99f9-4090033c7208", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e46420fc-cb87-54e2-bf56-7755ad89cf2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6e51dc83-0970-58cb-a269-bb2a31f014e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8bb37619-712e-50a4-9a35-5758fecdc9d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4a5b4636-9439-5a45-acaf-c51e93812a3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2dc2fbdf-2cfd-53c3-843f-d718adf50320", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:31a73d4f-69b6-5253-a871-f3723b9ff9da", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop. not_affected \u2014 Target version 5.2.0 uses a fundamentally different multipart parsing architecture than the vulnerable code introduced in Spring Framework 5.3.0. The CVE-2026-41853 vulnerability affects the new native Spring multipart parser (MultipartParser and DefaultPartHttpMessageReader) introduced in version 5.3.0, which does not exist in version 5.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7b897eb6-f992-5961-9cef-ff0d26d635d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c49ef86c-0581-5a44-bb68-8bd3004ff2f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7774efc1-6dda-5816-88b4-5ea4abe8e16a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:920ef35d-e728-501a-bf64-04687d406a26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c52cc8c2-7466-5013-b0a5-5148eee08e0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f239ac3b-8e65-5479-9dab-cd53e1784a26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:33633a0b-bb07-5b26-adf7-35f6d52c38af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:17f27f10-3a1a-5e08-b28b-2dec0436582b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ccddffbd-dfe9-54af-9c11-9d9229688971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:41a286f2-1909-5f05-88b0-a7ab562db510", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:72c846d2-627f-51ae-ad51-90bc0d8c0be7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:0ebd3dbb-bc14-554d-8dd1-2894b6016c00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4969b618-693b-58c6-8bbf-15d2c5ec860a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.0.RELEASE-tuxcare.6 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.0.RELEASE-tuxcare.6" } ] }