{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:e0f90830-409a-5a2e-8232-23943a20b868", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a9aee3ba-dbe2-5c6f-9f57-224391f833d7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-aop. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c7ae57bd-8373-5f48-8fc6-ce5a45487013", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7f284b48-03c0-581b-8c40-f245a43a1c69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:86592acc-c692-54bc-9f66-5fdd61dade22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:90545654-ff9e-5c88-8f0e-a88b5e1c2c37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b7bcca63-24e7-5e8d-ab30-b19f9668254a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:084cd066-72b2-57f2-8b61-46279252bc1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b2426b04-c784-51b4-b43f-7fb7c1f35308", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a8074450-7269-562e-b0fb-dc1f4f0b6472", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0b9af7ab-e4de-59c5-99d0-fa1dc19ca298", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:562c1a00-7115-542e-94a0-fe38669cee67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:fe682c62-7779-5bf9-a0ff-90ef4dfe6958", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:601ecca8-03bc-5e86-a1fc-0e70a695ebbb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:861f32c0-5bd1-56b3-9afa-00342a4b2ea0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e990a6fe-7271-552b-bcb5-41a5d63d8ccc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8afdc2c5-5811-5158-a888-18879ede2aaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:60047aa7-6d2b-50bb-999d-7f93beab102c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8993ee16-0397-5a2d-8e8d-a5bf2fdc6da2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9d719cae-a438-5111-b68b-8b488dc2e66c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:92edd22a-bf9e-5948-b45f-0000ed4d3b5e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:c99c5ada-0555-5dcb-a53d-c48c35336b02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5b04e9b9-d197-5ece-92c0-65d466489a0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e913dbe6-10ba-5e77-bb26-cd78bd5d1d71", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4626e0ec-490a-565e-9700-2883a1ac4ed1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:772ada5f-c5e2-5edd-84c8-e605bc5cbd18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:aaf6daad-620e-504b-9a1a-3ac7a994c180", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9009a747-b3a4-514f-a2b0-f71031e49a5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:79dfe07b-1daa-5dd8-a952-965ab68c03aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7933e656-af77-5d96-adc5-163c188d655c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:aa2d2d6e-0057-5d30-83e3-276eca771188", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:dd8c42dd-d87d-58d1-a0d7-dd089833d5cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:497e5860-abd6-5ccb-ac6f-00fc98bffce4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:df3f8424-8fcf-520d-bdec-1bf0f38add27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1271d450-3631-52fd-ab8f-8ea96d534eb2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:86d165da-cf23-5640-89ce-f7b00d4bf3d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6ad8896a-a6b8-5754-9fc3-ff9ba8b5e7be", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:b1a38e1d-3219-50b7-aae7-4b3b562d21ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3c7d8956-9dda-567f-99df-a9c02bce5ade", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:bd011436-4551-5c19-8ab9-57fd19268e34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f0051a36-a6a6-5304-b42c-46c048bc5f08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.1.20-tuxcare.11" } ] }