{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2d06b3d4-b8a4-5b33-b106-4f2ddb83614e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4", "version": "5.1.5.RELEASE-tuxcare.4", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:30c2b5b4-de20-58d5-8671-45dcf7421394", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5398", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8ff1b0c1-bd99-5af2-97e4-849424e27202", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5398 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b62ca643-66a2-5999-a439-51973627f01c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-5421 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:548b489c-197c-5a62-a213-275443320d1b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:77f4ddd4-a24f-5c69-af3e-50b7ce6b0c50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:e9c9bedb-750f-51ac-baf3-d88d5c31fd5f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b27ec4c2-de1f-5c83-a81e-c18580fd5149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1c74b310-dec3-575a-86f4-668fb300ab55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:681fbf56-5904-5052-92bc-4b5ff768dfe1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6221d1af-d199-5a95-8eb9-65f3663cf405", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a3c2db57-9db7-58c1-91e8-9954869a9e5c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:d616d416-0206-5766-aa44-6ee285d6d6d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f5cd712a-01e3-5648-969e-daf9b32eae3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6fc0ea1d-dc91-544d-9a36-e28d39a8ed77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:226f23c3-d851-55ea-b501-a973305ba6e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3c5b1b2c-2526-5e45-b5ad-115af684760a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:297308ce-7ac6-545b-8717-7be9fae9bf6b", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-aop 5.1.5.RELEASE-tuxcare.4." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8a379f0f-06d3-5460-bc50-366b2c0d9c2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f792fc48-6570-58d2-9d6a-fc7c2aaed853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:40da1d92-f7c0-5abf-a4b3-5b518a60fd84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1fded842-aa24-5c78-9f1f-f84a3b19cab1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:1f7c5b25-9dc4-5530-90a4-1c20d6b598ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6f7704ab-729a-5adb-b9bf-27d45df15459", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-41234 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop. not_affected \u2014 Spring Framework 5.1.5.RELEASE is not affected by CVE-2025-41234. The vulnerability exists in 6.x versions where Q-encoded filename parameters fail to encode double-quotes, allowing header injection. Version 5.1.5 uses a different architecture that only outputs RFC5987-encoded filename* parameters (not Q-encoded filename parameters), and RFC5987 encoding properly percent-encodes double-quotes a...", "justification": "code_not_reachable" } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:76ed0855-68ba-56f0-afbb-2c5a4cf11f48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:db5413d1-d755-56ef-8215-fd63c596458a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:9c0a5415-203d-50d9-bdad-e57462978bae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b5d18de2-f9a4-57eb-af20-301aa4a1f321", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fb788ada-33df-5500-a5d0-8553f48f50c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:14a294fc-06d5-51eb-bf57-a916ad0bdfe8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:984922b2-4d8c-52f5-ad46-d97026f295c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:fbda0e33-a12d-55d8-9697-47ff0e28b6c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:eca214fa-c1b4-55ab-a4fd-dbdffc49b9ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:43eb821a-91b8-55bf-a78f-8c474bf9f19a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b94972f8-9692-519f-be8e-ce59424e88c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2f51c08f-a8e8-5413-8fae-7bfbc01acb70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:bcb1375a-a0f5-59c9-b7a7-6c8a9502a62e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6dc374c4-cc45-54b3-a089-084cfc1d5b74", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:27d0e9bb-767b-5d29-a8b9-9f993f5bcbd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:ce8ad781-5192-5f73-b99c-fcb20a265d84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:2e64659b-ffdf-53a3-88c1-a7abc655bf1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:39984568-5063-5588-9382-1b75348e5168", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop. Spring Framework 5.1.5.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and does not contain the vulnerable RouterFunctionDsl.filter API." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c127d3fc-21a4-54f1-a2f3-5bbc26464e60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:734e06cc-4393-56d4-bcb8-0f7b9fc78d4d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:125ee91e-b0c7-5864-8145-5f40bcdfc461", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:6d7e9f2f-872f-5ba7-a524-134f1ee4e688", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:60dc8b59-2ed1-5587-921c-32658217226b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:b1c4521f-bed5-5edc-9456-2a9d5342df5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:f0d27f4b-e065-525e-ac3b-fc5d81f42017", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:aebde0aa-ee68-5e47-ac61-ecf551768213", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:759d96a9-c43b-5a28-bf4a-24f85c503e1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8be86886-e644-575a-b30a-315b924a7d2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:8a23314d-66d9-5ab9-a893-98a1e50052a5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:5b6e76a0-284f-5e43-958e-43c1ba1b82de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:da61d37f-4023-5051-8733-2d3364708c68", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:c417a4a7-a931-5c98-a620-65ced039ad08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:61bc8110-c731-5bfc-a574-d7968981f8ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:3fd28130-c2e3-5444-ae3f-552612fa844f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:a9ba8804-109c-55e3-b0c4-9224997ca43e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ], "bom-ref": "urn:uuid:24c46232-d61d-55e2-a799-822c1ffddf10", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.5.RELEASE-tuxcare.4 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.5.RELEASE-tuxcare.4" } ] }