{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:52cf890c-0bf7-5105-b35c-a8a3d9559de4", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-aop", "version": "5.0.13.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:425fe27f-3d7d-5e9f-bf66-cc463b32bea9", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5981500a-6a09-583f-bd1e-b00163ff561b", "id": "CVE-2020-5398", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8ebc8505-c99c-5426-80c6-5d8751794a23", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9c4e4f80-16ae-5047-8b98-e6a2198b2c49", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2079b1c6-f710-5b39-bc2c-de64aea83ae5", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:288a1a17-a94a-58ee-8f33-7b36c42dfcef", "id": "CVE-2022-22950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8e4f4690-ff54-571a-b729-f9791f3c64f4", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:628b61a8-610f-5656-ad39-d6ab19f71258", "id": "CVE-2022-22968", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:82969164-2f5f-5ef9-af30-9765829b4ff1", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:03b21f86-5109-55cf-82eb-03d33afe7ce7", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f8e71fa1-6b0b-5196-b779-908cab59296f", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:66bfde3b-d2a3-5136-af18-5086ff915075", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3d287432-914a-5a3c-9953-01c477d0d424", "id": "CVE-2024-22243", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a4ec8c52-bc5e-5ba2-ae01-56a4caa6d1d2", "id": "CVE-2024-22259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f0a9d0a0-c411-568a-b115-c32acbd68e87", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:17fb852a-ebc0-5edc-9ebf-96e59794ab1d", "id": "CVE-2024-38808", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c1afe6e5-7609-5584-98d1-908c62bb4335", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3ba6f470-67c0-5eef-a715-b4a7fc352c23", "id": "CVE-2024-38819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:12b66d9a-341f-5ee3-a2b6-3d89822e92cd", "id": "CVE-2024-38820", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Target version 5.0.13.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() calls that were introduced by the CVE-2022-22968 fix. Version 5.0.13 predates CVE-2022-22968 and uses case-sensitive field matching without any case transformation, therefore the locale-dependent bypass mechanism described in CVE-2024-38820 cannot occur." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5000088c-7080-5d35-a92e-9ba663212f17", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:adfc77a4-1808-5335-9858-a3ec17d70a3a", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:000ec849-c719-5d97-96da-3c3ae3eaa386", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a7f40409-1b7f-5ef1-b13b-3e4552140bbe", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:262a56a6-c026-5430-afde-d13088aa3958", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c4cc964c-23da-5644-aab7-aad9d24b5961", "id": "CVE-2026-22745", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22745 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bffb0341-4aaa-51a1-93bc-4da172797f2f", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f70edb76-8a90-5018-bbb7-bd12c71560e0", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b57ac08b-9d73-51f4-9798-321ab9adc55d", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:79ef6be0-2e6e-5bf0-85a1-f95e94eee64e", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:43152d28-c33e-5249-ae40-ee3b26f5dd5f", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cefbaa1e-9b36-5a12-b9df-d6ba66bafd0d", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a35d6a12-234d-5934-a86f-6707e6c83c43", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e441cbc6-f950-52ce-bfc6-2a662bae7e69", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2399ef65-9ecc-5389-9fc3-aae3f49a91f6", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f6ba6cd4-9bd3-591a-a3c3-faceea9c32fe", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:5478e2f5-4d53-5add-9396-ae73e08558ef", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.0.13.RELEASE-tuxcare.1 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.0.13.RELEASE-tuxcare.1" } ] }