{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:34c98d52-d237-56c3-a044-cd66d1f01cc8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1", "version": "5.2.11.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:345840b4-071b-5fac-8cae-cd14f4fcfac4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0db6721f-ccd5-5070-bb23-cd502179c869", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:48892049-87ff-55c0-a88a-8a5ffe92fccc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b26099e8-8046-5967-b3ee-90cdba92d217", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1203dfc6-8ab6-539a-9244-9e066afdef92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d5c07554-358e-5494-b866-1efad1f76e46", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60226aca-336c-57a3-8fc6-864afe75c767", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4f588780-e75a-5c3a-b34a-579eed94fe72", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cae033f1-7243-5723-9395-372bdb6d8d12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e0749ac4-4b06-55fc-bbb1-5f7961c0db45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5c33cd30-b8a3-56c3-834a-4bed90c3e344", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e15d4a7-365c-5e39-b3ef-81d526304e12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b469b95d-b139-58e7-a5f8-b5eac2782150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d21c6bbc-700b-52f0-b561-c7d4a96bc8e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8c9eb21f-caeb-5727-be2d-8f45191fbf0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d39e6a2c-63e1-5475-b188-4fb42131d335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e91e6914-6d4e-531e-b140-e72a266728e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38819 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc70c672-3e29-578a-b968-972b811b6ad7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9fde61bd-3fb0-5bfa-a366-f8ace643d0a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c839fb6-68cf-58aa-a8c4-776a9f1d127b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e34616f4-df78-5b9c-a9f5-3613c88a5d5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:315d96c4-2ec4-5400-9c04-f93eb14a1283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8d3370fa-f607-5103-b6e3-f3d6c5660b94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ace63418-fb15-54bd-9ffb-b4a76c0d2988", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9262d90a-4f50-5d21-a718-a513dfd13251", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:58d756a0-3cfb-56b7-9f7c-d08426185527", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1baa6b5c-3dbd-5f64-bd17-107257b222e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:475f097e-5d8b-5f0e-b432-92c7948a430d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:78b752bb-86e9-5414-9165-b550bcfbb749", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f52b1130-998a-5bf7-8a38-9c3a510a0858", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1faa31da-ff34-502a-9217-7fb078ed1bf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f0144fb2-800f-5d9e-84e4-76d06cd64d1f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ef59c3ee-7825-570b-b8e7-d04ebb1c09fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:87b36a22-3ffc-58ac-bf77-c401857b5695", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88eb7141-e688-5afc-9a48-d7a3339b5ca6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a041e085-0233-510a-baf5-52adcdd2f3cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0ffc3236-3f20-5321-bb1b-fa604473e36f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5bedcf2e-ee0d-503d-a160-1e9c145de0da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c40195a-5d80-5a1e-bc12-87aa6c343a5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc588f26-ccad-588a-a505-cab5dfed8482", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1aefbe0d-2aa9-5344-8dfe-5adc28814457", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9c5ce4c-f84b-57ef-88eb-13d7ae0bba50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba05f406-4f32-5dbb-80f8-5828950d8e50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b7f05b1f-7b17-53dc-b345-0062c0500c39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:74f4332a-3dc7-5a37-835e-afa66c605fd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d09e430-447c-552a-8ac8-443141d3289d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3589937a-2a36-5470-a8e9-333d570f58d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b377f72d-8a53-5fad-b0d2-738d3c45bd15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bd83e5e7-1d86-59bd-ba27-0be7c0ce3c1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:85090a22-c52b-5825-80cf-e5e016aa04b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f63d3f1e-de48-5bed-9c52-c115a1808932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47892 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b72b11ab-4237-5b3e-8985-1972cb997294", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e83314b-4982-5645-9cdb-d6e9f1249b33", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4eac3929-6e6d-5c0c-9a08-fe534aef1afa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:80362a25-d0e2-530e-a2ad-faf5030c7682", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55394501-f1b7-5c86-b73c-dd219be900e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab633355-c1c7-5b14-83f8-6037d2936c4f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.2.11.RELEASE-tuxcare.1 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.1" } ] }