{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d2ea52f9-3cf5-587c-a878-459f43a543b6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-aop", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:dba41fe5-c8dc-5799-b6c2-82def56dcef4", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8edbbeac-2326-55da-a7d5-0dedc32d135b", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:3c9883e4-0fe4-5aef-820b-b89a8072d94d", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:44d03e3d-f2d5-5821-9870-3b33049fe81c", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:08197bc2-3ba4-53b0-8a50-3e4900bb9196", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:deff95a2-65ed-5e50-a870-9cb4063dfbfb", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:70608c1a-844c-52a1-95d6-0cbe35613c66", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bf8eb40d-df77-552c-82a6-bc41f2dd5649", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:28ad4028-a822-5b14-8d0e-4f564318fad1", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ee3180ef-aad4-53db-a821-9da9aa8bb69a", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cf2c8e63-2a6d-5c14-a4dc-4004e18c197f", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e59447e5-a925-5a2c-a26d-be178512065a", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e218c14b-2155-5078-bf98-36b2c0e91e6c", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:603f0da8-073d-5977-ab30-ca0287a0d123", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fef03a5b-5681-510c-b5dc-78b63e17378b", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dfe13fe5-5141-5a6e-a813-68552173a37d", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-aop 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:340726d1-909f-56f6-8fbe-d216e3f5b764", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e21ef3b0-7a4d-5337-88aa-53d308b8fd97", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1b09d251-bf1c-581d-977b-5fdf300f0cb2", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de912d10-358f-50b5-94d6-5cab5264480e", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2210efbf-0761-5916-b328-c37e15db18eb", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:881335d3-278c-5938-9b78-7a6ec0096328", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8245af38-35b6-5f14-9867-73e7dd17b32d", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:795f2326-ab16-555f-a852-8eddc0fede29", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fceffae8-3d1e-5322-a4bd-ee167e54950d", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8d5bc64b-0c7c-5e46-84b8-ba84ce991a9c", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:075f29fe-0c36-52dd-8e23-2ad0871bee05", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2a7e1e22-5e5e-5e08-8487-f4d69769463d", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc1710e0-a101-5884-a0cc-37903b691704", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7527ecc3-f76c-5504-a178-4a696f181c72", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c64a2fb3-c5c0-5ee1-abac-fc1003b82527", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d2941a50-34f5-539c-b69b-8adbb5ac204d", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:005cdb16-169a-5900-a6d3-8d49aa230a9d", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f057e7ea-66f5-59f8-94ea-892aa5018646", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f6c5ca83-a37b-5a55-af99-a85231bd92ca", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6696d589-4f2f-5ffe-931f-ed93ab6cf6e1", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d833aca6-56e7-51b4-8090-83af2fb461aa", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bc2fe6d0-a18e-5acd-b730-89f008fc32d4", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:eac053f7-6373-586f-8a5b-4e991c6ddc56", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ad127908-3edd-5278-aa93-07cb8bf97ba1", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5ea92a69-4895-5754-9543-6ba14bde217a", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7f63e067-3e82-5090-b222-7d1f7a438719", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c43688a9-4eb3-5d1a-b58c-e66c68ce2ad6", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40faf2df-fc50-53c7-a199-29a1c0dd9726", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:40af2063-244b-50cb-a634-ecba419a0f2e", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4f525649-20a3-54d6-9da5-4e4a04f94bb0", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8ed4b0f8-987c-52d8-b939-5ddd1051a3d2", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aa722c98-803b-5d39-ad06-20be0eff064f", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e7b85ae4-dc42-546f-a78d-daf8d1480f71", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae662421-9080-58ff-82e2-16ffc701b712", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9914445e-67ce-5370-a2e2-4e97b2ef1b4b", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de7758cc-62cc-5bad-b89f-b0d3f6291965", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6c463600-4fae-5652-b18c-d24eb51c0171", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:53851120-82db-5048-aeb7-f4aed3323363", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9d95de32-27c7-50e6-9e3b-8c599dc74b3d", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aop." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.1.20.RELEASE-tuxcare.4" } ] }