{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:470a36d4-bf72-5814-8048-5d0b31ea448f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13", "version": "6.1.21-tuxcare.13", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:98a1d051-374a-562f-a475-da91491e1f75", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.13 of org.springframework:spring-aop. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9cb03192-5a94-5da9-ada1-bdaec9973895", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:08a89d90-a67f-58cc-90a0-6197129eadb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:13bb5f20-04d9-56c3-be63-c9474ac7aea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:1c01bdc3-642d-507a-b504-12d5335c70c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:fcf92b79-66c6-521f-9a94-fa2259a4a0f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:bc36f31e-ef73-583c-9a85-5527d238088c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:9d9a0e26-ea01-542d-95ab-06775acfb65f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:44ef5a59-ad20-53b1-9ce9-a306c6fe51ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:93e31cde-6923-575a-81ce-9ff791c1ec58", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a3b8cd80-235a-5e0d-b68a-1b2114cb4992", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c9d8988f-f6a4-5c25-849a-23bc076eb62a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:51f00e7e-f8a8-504b-b603-cb5005672bc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:856d4f52-c91a-5e15-935f-b6430fac63e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:7cf71c6a-1e64-5b0c-8330-bcfac229d5c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:efd28ab8-897b-5bb4-995e-897f2a0b0e93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:226955f5-d51a-5a10-a162-2885827dc29e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:522a511b-b9f6-5ea6-92df-8ab0b95bdeac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:65523b7d-d06e-5872-9d90-17325c7df254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:616b6d80-d6f5-50bb-80e6-b52769edc6f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:3d8c76f1-6725-52f3-b766-9678bb12cb67", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4beaa0f1-0a8a-53b1-85c4-6c9d34237686", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:61eb44a0-50fc-5e76-9c82-cea73881e1ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:e4f06e47-a91c-560d-9d14-d9ab96d1a5f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:5fcba5b0-c7dd-5c4a-bfa1-fa512449a3e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6ee17ce3-d6e4-51fa-8f26-6f728e298a56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:c2e9749d-d7a7-5527-bce0-1aca3c51a7eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6268e326-ec02-573e-99df-38c5edd1c04d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:30a53480-b300-5eb7-951b-7d2e3508fef3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:f01e48f2-e3cb-5655-8816-d69716fd2c10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:7e5ac402-ac57-5e29-870e-23ec2988a564", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:815db3f0-99a7-5563-b499-d9e7114ec479", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:a474c835-a6f8-5dbf-8720-efa658d90e95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:6585de99-f8d6-5c00-aeaf-29d1d49a5c38", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:b639075b-e9bd-5497-bf30-b2d94b76d8af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:433ae86c-4684-56eb-a38d-fa1933c2c7e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:3592b322-fa44-539a-a0b7-632f603966de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:bc200b57-50a4-52b4-a972-8dbb52fbf072", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ], "bom-ref": "urn:uuid:4134c032-cc13-586f-abb0-db0bb3126a3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.13 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.21-tuxcare.13" } ] }