{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5c12070e-0911-5ea6-b9b8-75aeca1f3b72", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1", "version": "5.2.9.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:66d35718-ae8a-5d1a-8859-dbb94db7c793", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c2070bc6-05e1-50fd-9dfc-d328b00631c4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:827e48ba-d650-5f22-b09a-b26418f02792", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fa0c5ee2-bbfb-5e85-a3e3-d06b4f2c1763", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b8191192-6263-5cf1-bc0b-d7bda26fc7a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22950 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a227cb56-c59c-5ebc-a8a1-13d823c4ea7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc66ae62-a563-58c8-badb-76fb80bb708b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a1ee786c-de8f-5807-9f20-39f3b55d89f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f78f0084-2bb1-5ecd-91ae-04d6a4a72b5a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dac022af-d1ed-5a72-9fe9-474dac3a0f2a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a30de41b-a183-5220-9c4f-c326c744e23f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:25d90f00-2efb-5910-97f0-5e2ab6bf6db2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3c9296bb-f62b-5d35-8544-851434ce32d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:202a1c37-aa2b-58fb-8c15-dbe08fa1f5cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e13fdcaa-412c-53f6-a533-3c5fed00929c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:10659e62-5f05-5a8d-afee-e7e78c42515d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38809 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:208c9faf-528e-5ecb-bafc-3b10966bf128", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:cc680d9a-f280-5cef-a3ad-d72ce0848573", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c6103e5c-ffa3-5a27-a59e-7539b7b35d59", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Spring Framework 5.2.9.RELEASE is not affected by CVE-2024-38820 because it lacks the vulnerable code pattern. CVE-2024-38820 fixes a locale-dependent case conversion bug in DataBinder's disallowedFields validation that was introduced by CVE-2022-22968. Version 5.2.9.RELEASE never received the CVE-2022-22968 fix, so it still uses case-SENSITIVE field matching (no toLowerCase calls) in DataBinde...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c0bc3e14-d0c4-519f-9843-23a0cf349218", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bea5eeb7-3284-59eb-b9b9-0a4c62f3c862", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f86292c7-7968-5704-870b-5250c2e7f9f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5f3cb591-6405-54f9-901c-bbe3349a469b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7acb4116-d481-54fc-afad-c74ace25f950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d941530-76d6-5add-8c4f-5b5c6cc38e70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:967fd973-3475-585b-8763-0ceaaa8b5fda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dafbcf9f-1273-5127-aa9a-0972d4ed896e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3d39cb29-5669-5c4d-95e3-8886f80affeb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:587f82ba-2945-57d6-8f53-d9bc790b9d0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:21e64181-968d-5f4c-909f-3b20817c0be1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f23f2287-7105-5c89-9b92-e0d2cbf11e48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:60a24911-ef92-5447-aa02-91d0b434381e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:540cef7b-4cd7-5185-b3b0-8e57a7eaea24", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b9c89e17-ef6f-5461-97f2-3154308c8415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f24083ab-aedb-568d-a1d1-014154db273c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c34e4dc2-4826-510b-b3ce-2df0379c6d8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec9302a8-b816-521a-a358-9720ccd45443", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba59e977-68d8-5e07-af44-dc8d07260861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:881034c6-bf48-5adb-9d59-2f84999b5696", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:871abf0f-41a3-54ca-8842-8088b3e19d0c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2317d28-dcbf-562c-8c02-f9611acc9ef5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:31fadfea-1dc2-5019-9168-c6aaccbe4c11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:576216ce-845a-5186-9fa4-333685cc5487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:315fcb45-830c-554c-97ff-9bd8060b24f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd477d0e-6495-566c-aded-03835379d908", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ee5338ed-b624-5004-a4e2-f0e47c74a62b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5ef31157-f478-5fda-ac1b-30b154040e57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:654595b3-eccb-5f9d-a533-9201e7a213cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2b64dc74-655d-529e-b2e2-f3e7b6be8afe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:13ecaf3a-c912-59ba-88c7-e47c65977fd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:43bda54d-4903-53d0-abf7-4712680eedee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba4e4e3f-dc16-53ce-8fad-7b385d81fce3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3bf70576-b1d6-5cf4-b4ab-b7f63c805450", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6404ac9c-af10-5e9b-94c0-780f65d87661", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:662730f8-475a-51c7-b6c1-0f09daf07d1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:41f5c781-e160-502a-ab67-b859bc8599b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:858dd3b8-c14b-5b38-bd8e-124464ad9445", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5387a895-1174-53bd-b45d-1098071076ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.9.RELEASE-tuxcare.1 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.9.RELEASE-tuxcare.1" } ] }