{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8d53cc1b-aaaa-5adc-8785-4e9ac87b2527", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6", "version": "5.1.20.RELEASE-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:493aa3a6-2be6-5a17-930e-e72545cc2381", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:46d50dc1-34a8-5fb5-aed4-8af036286081", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:02922d0a-04da-5001-9560-a97c94ad6242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9435727e-a998-546e-a848-0f04e99a8043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fb618c83-b234-53ee-8c7e-c00cfe7185c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:93531cb9-3d9c-5c7a-8300-cf0aa36c16a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9b1564bd-eaa6-51ed-9135-b75c167f4d0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:dd32d127-df35-5c99-b947-7784a15af83a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6733d79c-bdb8-547b-adbc-a7d0b7985278", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:1bd36c8b-88d6-5e92-b373-ea2ecb2ca078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:43166a6e-c7e6-5b99-a1ac-eae153fdcdbf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4ca354fb-ea2b-5dbe-93f1-8903e2939d1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:42a7a5a5-2993-5e72-9233-7bb34aae0811", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:f49afaee-1219-5a83-bca5-a170fd75e716", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:9ab9784c-d82f-57a4-9204-677278e32281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:db44950d-334b-534e-b590-5d415abc672a", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-aspects 5.1.20.RELEASE-tuxcare.6." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:77c4034d-7bd5-5f87-8080-a6d31a25a3db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d7211b12-8315-56aa-8716-4fd550a004b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c3413a72-85e7-5bfd-b0da-5512b956d3ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ed38e930-8185-53db-b48c-73707f16485a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:b4466e14-4d36-524d-8039-1733a79e93a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ae9a419c-8668-5753-bf05-bbde9ba39dae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:926f90ee-945e-5c66-b5a6-87ef680f4f7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d16d96aa-614e-5fb3-a881-d0643e6dbea8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cd2e6840-f8eb-5018-ba58-c65deda871f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5476ebeb-860f-54c3-b26e-f5925c7e695b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:77246676-9650-5d58-a614-2d1322b6e47d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c9f77b51-7fb5-5a0f-804b-2a03718cb334", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d74e3b5a-f8fc-5f6d-bcc4-622a40a401e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c2475942-5572-56e2-9eca-9dc4fa917b94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:2bf6a16a-a3c6-5ee8-8b43-268294058711", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library).", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:8e3a952d-e39d-56fe-a465-c7c9ac0c6246", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:7d15ec98-1ce6-5670-9aff-18ef2cef9293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ec17b84b-6625-591b-b18d-8586be558817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:971f4a9a-1ce0-57f6-a289-af322e117f2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:542ef770-2ec9-502e-9d1c-707ecb5cd432", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:58529d12-baca-55f3-bc96-743a89e90c08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:d4f3f7a1-a7ae-5355-9966-1045ba1cdc3a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:4aced7ec-2271-5e41-96b9-cc7acfcf9e76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:fcaf6eb1-0153-56c8-a16f-c1f28c5309e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:ac8659d8-aaa9-5caa-944c-7f3f4a3fb581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:cf67582b-ca12-5f7e-ac43-b9b239518f4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:17f6452e-ca1f-5927-b4e3-f862535f78d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:5ffd82a8-162b-5ed7-ab33-d5b7040dc0d3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:57e7d389-fbf7-5374-91cf-21014dd70ef6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:e76166c6-b7d8-5efb-9c2c-d608e73a289d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:bbe854f7-f29a-5be7-93f9-97a8816e6a91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:88d7e759-e7bc-5aef-9d44-3ee939564e9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:913b83c3-2520-58c0-8fc6-4f63bf500073", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:771d5521-a2b1-5805-a896-0557d27b277a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:c0435a68-d14e-504e-b5e9-0aa8a49c1c42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:be3e4d8f-0dbd-5339-8d95-7cb8f81a51b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:011e3483-1578-5704-9b83-b51fec892a8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:28a54997-bc7d-5a26-81a6-3d7c233bf548", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:6a6a93de-6048-55ec-8b60-a8031a26ed14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ], "bom-ref": "urn:uuid:dd41ea17-465e-571f-bf4a-125c797d4cbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.1.20.RELEASE-tuxcare.6 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.6" } ] }