{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:389b5f1c-6c0d-5b9c-9ef2-26c3d53acbf9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1", "version": "5.2.8.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5676f50d-a744-505d-9257-11317ed63718", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3b4539ac-20bd-5f3d-b623-3e4d578d7ae8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e779f97c-b796-509e-b99d-54fd9a520ddf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:88cc952c-0a03-510c-923d-cac155737d46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e16d638c-56b6-51e0-9092-a64a3285c83e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11908972-a838-56b7-8065-e60b23e6bf73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fddd82d3-09e9-549a-ac8e-3a37fc36f18d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cb97f6e1-6290-50ac-a53f-566ca8f5ad7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f9ef4798-ae98-5e77-a93e-1b09b47801da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:940fb379-bdf4-57a5-8967-7dc0f13aa3e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bfb60413-94d2-5d51-b5c0-55bbfb68295b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b17fb35a-3b74-5da1-832a-47f371a44932", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:baf7528c-b948-5de5-810b-6c1bfa3a0d7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a8473dc5-99cf-5dde-aed8-0fbdde32bcf5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d6f4b04-ae0b-5e08-b67f-7e8b3ab88ddf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:885159be-dd72-502c-9fea-0ed4e4d0b098", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:eef8509b-b9fb-584e-939e-8996b62e0712", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2844f6ff-d0e5-57ab-b6b2-946bd641fc4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ffa6aabb-f95c-5f58-9280-a4aeb46238d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2eaaaa61-2970-5b31-b1d3-cf9034523d1b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Spring Framework 5.2.8.RELEASE is not affected by CVE-2024-38820. The vulnerability requires locale-dependent toLowerCase() usage in DataBinder's disallowedFields matching, a code pattern introduced by the CVE-2022-22968 fix in later versions (5.2.13+, 5.3.x+). Version 5.2.8.RELEASE (July 2020) predates that fix and uses case-sensitive direct matching without any toLowerCase() calls. The vulner...", "justification": "code_not_reachable" } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:94031213-d058-5126-bce8-8801dc270cca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:29252bd2-3e93-5142-ac7b-bed1c88e2eed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2697378d-e119-5a0f-9c3a-288b18d7944d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Version 5.2.8.RELEASE is not affected by CVE-2025-41234. The vulnerable code pattern (PRINTABLE BitSet without double-quote encoding) was introduced in version 6.0+ on Feb 1, 2023, approximately 2.5 years after 5.2.8.RELEASE was released (July 21, 2020). In 5.2.8, when using non-ASCII charsets, only the filename* parameter is output, and double-quotes are automatically percent-encoded because t...", "justification": "code_not_present" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c5d32491-97b8-5ca4-8f9b-bbafb617512e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:075e7fc0-b285-5f22-bd17-694f814e4377", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d328c2b6-89c4-534b-875a-91909bfa9086", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:61e5afa2-0be7-5d1c-b4a5-c51c65d09f1e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5661ba3f-5139-53f2-8e5f-5e3b4ea46c2b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6b541e0d-f350-5155-8e19-257191d7ba4e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7b4f2273-acbb-5883-89fc-599cdb90dd3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c61a8275-afb4-5aeb-988f-3b2f7b74cea4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:77004d71-4639-5bce-97f9-700e5d769cf2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:987e1641-21c3-5af3-b450-deb0fb248a5a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:69a1bdbb-7fc8-5aa2-87de-f0821b3bb2f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:818b231f-9713-5213-b142-a7764fd98069", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7fb73650-35ad-58fe-b105-a14e411fb782", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d02d707a-394b-5d0e-88e7-010e2f8b987f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:38eb9776-f62c-51a3-9d53-2e5a7727313f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c074a60c-0a4a-5414-ae9e-ec1257934837", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6b84e229-f2b3-5752-9881-46954f7fdb01", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6d805288-794a-504c-9219-7876d900ec76", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b37c74ed-dfef-5cf8-a4fe-6dec080c0929", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a8b2902-310f-562a-a7ca-477dea820e9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:755f140a-1400-5d83-9687-3094732d832f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89bb09c1-137c-5849-a1cd-c164f40e1a99", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f043cfef-5d12-5cf0-b8d5-d3efdbc27c5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2639c58-1b59-5545-ab9a-26ca72da99aa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:656c06e6-29cb-5053-9cb7-06b25f74542c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4ce7091f-255f-55e4-b400-88e536e4e5a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ab50c954-e220-5942-9e81-f92e7fd9c3b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7a342590-c723-5afc-8286-154b17a022cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5151587f-4812-51aa-bcfd-cb0c86ef6236", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:925af53f-d5e7-548d-8803-8991d1a08589", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:74ff4ef5-7835-537a-971d-eac4d370cf94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:9db731aa-e6f0-5d1f-b664-23b58f855868", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7d22b2aa-e7b6-54d6-a1fc-2a6cd06a4f72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d604d183-0e3e-5e3c-b5a7-16fbbc9c6b21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ffd42f2f-5e7f-5f71-80b1-da43f4b95bf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8be97a2c-e892-5c0b-8c7e-b6106e20948f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:56c50508-c1a6-5275-a12b-1691690c6b49", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:79ad6725-6aa4-5d02-9a57-216851c6ccb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.8.RELEASE-tuxcare.1 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.8.RELEASE-tuxcare.1" } ] }