{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:fafaa005-6aef-5e2d-b385-7007944a0549", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1", "version": "5.2.10.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1fa1e2cd-3668-50b4-9c64-04f15ea0a4b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6aca7a0f-27bc-5db3-969d-9998aac7bbb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:036119c2-fbfa-5da5-aa16-3980fe8f698e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9b97cdfe-37ae-508a-bf73-72070293c544", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:03b249c4-24fd-5108-aade-4f1d705fc9fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ca31e8b5-2885-5042-b0cd-7ead10e9ed62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0994190a-81cf-5332-b2b0-35c0c4f6a3c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d97d4e5d-5ad4-5cfe-aa2f-b74e0836b75d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0f50ea25-5618-56ff-9f3c-e5cad152c6ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a048013a-5469-5a7a-88f0-249fffadaed0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb8dc1b1-84df-5d79-bcfe-2af88c13134c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be5d2e63-342f-5c02-950f-999713d82d96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:508a24cd-d4dc-5fed-a99a-9c9d21a28982", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70b33e09-d769-576f-914e-1ac27dc23dd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:befd0e7d-77ee-513b-acda-237f823b1391", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:579539ac-3019-5a7d-937f-d691cc889304", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b14f87b2-1b97-59f2-b227-8c84bfd62251", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:991dbb66-e5d9-5374-8a2a-b1851032fa3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9ab12ed0-8d74-52ae-9ef1-c590bda1d2f2", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a76f4c8b-d296-52be-a4ea-a4584764eb7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:37cd7912-cc9e-57ba-9cd1-b2cabd715eaa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f24b0159-0e7a-5aee-855c-1696e1d38942", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2dcbdc00-c8bc-5cdf-8984-1d6bcb498bb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a7ea3ff-a58a-5a09-bf23-4f429b9f10fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b404ba3a-d6c7-514d-9a8f-e831f2e001be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0e4d34b8-410e-54dc-a4a8-73e7f47dcfed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:19c4a632-95ba-5e13-bfc6-6f4a95a7c8a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f828d2e9-a80f-5365-93ac-78693ede038d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:07ec99ac-3c92-517f-a044-6a2b82ec172f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9abf28f8-355b-5e03-a432-36f47760b356", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e9f1ba9c-6702-56a2-b740-2e659ea437b5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9a800048-0a35-5636-b1a1-08858ecdb1eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:13346718-231d-5aa2-9159-3578fe8ccb78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1408ece6-53e8-5fe4-bdfb-618751b428f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc28b031-ec13-5add-a8dd-d4d22967feec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:911620e7-ec26-5ed0-9b5a-826e76cd1041", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ad43af9-8aba-5404-87bc-f2f4297cd25d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1ed57440-1897-52e7-b053-9dba7146f752", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9eb562c2-5820-5669-b787-89b4d1457915", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:93607784-f62a-5be6-9524-9bb936c05c5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dfc6a24f-713c-5f0b-a3c2-ea770e0d994a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6fc3b9bc-03bf-58cb-8cc3-d48f1d3d3b3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:42cb53c2-344f-5ceb-b8e9-f1018e131e7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3a311ea5-5463-578f-ba30-2bf61291e7a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:51d5ee86-7c53-590f-8e7e-5a5f21c05a97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d34a5c51-2baa-56b3-ae55-a5cec60016b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d49df06f-9d98-5831-ad89-2b239299aed6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bc341afe-0eb0-5804-b272-8c81237650d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d7ed96f7-787f-54ce-8b84-228ef72706ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:14de49fb-0068-5b09-aaab-62c81eb83717", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b637593a-ba16-5e35-a46c-53915ae978d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:45580c88-9a8f-5123-87ab-9d6a8c9bfe3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c642a7c6-f2fc-539e-863a-b9f3386ec9ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b81ab063-e776-51df-8c53-57d8757a90c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f6c803de-0563-53e5-8314-94b489155279", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7e17d3e1-2e8c-581b-9045-e25a049b6b34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:82ef0497-bfc3-576e-bbdf-62339e27e102", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:368faee8-f1ab-58bf-bfbc-eb83593556b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.1 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.10.RELEASE-tuxcare.1" } ] }