{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:10777a16-7378-5496-bbe3-198ce07f523b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5", "version": "5.1.5.RELEASE-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6ad34c00-f7f1-53d7-8a81-3cf2371ef6e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b02bd9fe-f47c-5eb4-8249-aa9eea09e7c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:bc700e6e-edaa-5e12-b394-5559dd2f679c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:30b212bc-2ab8-5e14-930f-ba28a1a229e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:67438fc9-c25c-5e12-bff8-42f8e5dfba70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7fd08e0c-9361-58cd-b28a-2c9e404592e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:530fcd46-3274-5c9e-91a3-1c771d17be3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e90af381-67dc-5674-b962-4832bc05c9fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:9fbe8a5a-fcf7-5d51-b571-5da81ad81b83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3340e638-fec8-531c-ac36-ff1d38597061", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:961faff7-bd04-5c2b-bc04-1f99891a79bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:98fda6b5-a0e6-5616-9834-2689b6b8fd70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:17a69154-8322-55cf-8929-320f07f479ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:92b89b20-ca93-5bf5-8dba-a06fb2d84e67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f9006fbc-5382-57a8-bc7f-666c027006b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6bd3f5b4-991e-5b20-862f-759ac3f538b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:484f1cbb-46e8-5274-9856-b5b6d5261604", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-aop 5.1.5.RELEASE-tuxcare.5." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5cd2630d-5e99-521a-8795-5fe843ff1a61", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7160fffe-849c-558c-86f0-79e96dc78b8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cedb841f-e4c8-5bfb-ab5e-838dd3e369b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f1ebcfa2-915c-5966-b872-f17d290fd3f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a3211622-ad8a-548c-a05f-e0a098ea2455", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cdeba159-8073-52d7-b8db-25d84c1bc1bf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:de0bee9e-74f4-56b5-bb29-dfde83639dee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f5de5d18-8f43-5312-9690-5a8dbe2b2c92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7e275119-45a4-5dc2-b01e-ddb617f626a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f2979c00-99a9-5dbd-8636-4339100a0a0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d8dcfcf8-c7e5-55e7-9d67-63f8acb526f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fa63ada8-1116-55b7-a9bf-0de4c3b3f4ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cd681151-f0d7-582e-a3f1-5e5047c86b06", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f63fbefb-f5dd-5f2b-827c-4fbdd66bfd9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:2b58f283-c736-51a5-ba1a-6a51ddd1575e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:7767fe74-23f5-511d-93ba-1b01d318b507", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:85e6ba26-1bd7-5968-8ce1-8d0718fdc258", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e6cb3cb2-5346-5225-b927-20bb40b36e16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:549556eb-e633-54ff-a39a-3e1cae0df84e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:6307b3ed-a751-5d49-8ad1-d8a74ad32cc9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:8351984e-585c-59f6-8f03-2df8176acc18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:fa8592f0-73fb-570d-afe2-3d1ef5779cc7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:5e687715-b006-5de1-96c0-4a92a7bf0f4c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:f17bd20d-6df6-5ff3-b000-59be1765d56c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e4ec3036-0e3d-55ed-8f13-b1e16d5c7897", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:cdd0ca19-e88a-5be6-8ba8-c5ed77bfca0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:17c0cea3-927d-5822-a7de-156355df2a9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:d24bc018-6d93-5769-8670-b1dfba14f0e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:23ed5a16-3b59-5948-8808-d2d591afe6ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b0c19e87-0253-598c-b142-53ba150af1a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:b901bb6b-b8cf-5f5f-b23e-6aaf4a946812", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:61114688-f4ee-5ee2-9503-21ed8f64655c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:0f83d767-d633-5196-984c-f9a1af85fc3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e568baaf-ced0-5a5a-9e74-6e2f2da6bc8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:e1baf75c-05c3-5f71-9f16-fc2e1cb5abb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:555f2e4a-bde1-538c-80fb-557d13716760", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:ae75da02-2723-5046-996f-13b051844d21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:a717cbba-ef68-598c-beb1-25e8394701a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3659528f-99ea-5f83-a01b-b90656d39c2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:c447f2eb-cb7a-59b9-876f-a5e9a1926631", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:3a9c6269-ce98-58ed-94cf-d7ab75903723", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ], "bom-ref": "urn:uuid:1c0c55ea-9f43-593c-ad0f-8f990629b381", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.5.RELEASE-tuxcare.5 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.5" } ] }