{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9aadafca-313e-5ea5-8f67-65554c8c9d2f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4", "type": "library", "group": "org.springframework", "name": "spring-aspects", "version": "5.1.20.RELEASE-tuxcare.4", "purl": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:87ae7ab1-ddaf-590d-8b78-a2dea663c0e3", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:39c54484-2f18-59e6-bf7e-0bf3ef653d9e", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:457bbb20-24b2-5b68-818e-102a62e7ee72", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8575a6bb-516d-574b-bed0-4e24284e9843", "id": "CVE-2021-22118", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4ffd30b8-7d1b-5585-99b1-39f4d5ecf6a6", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2f6fe0d0-95e1-57f0-a736-a9c3c4ebbcd1", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:576be705-09fc-5099-8c7b-1548c610083f", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2bb40aa9-8274-5ae5-a0cf-308d41ad6a27", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:07ff8861-7409-5399-bb1e-4d656d1e39e5", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9327a314-4571-5cee-b37b-a9d35ca8e79b", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1ce460c2-bff3-5623-915c-7b0d6015e317", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:49db1cb6-9187-5c1e-9463-8e1d23f203a8", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2d994ebe-9ebf-5bf0-974f-13d635d23cc4", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bd867e49-d9eb-5b95-bee6-2152ada1a823", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:76c93535-cb44-5130-8bdd-aa86db389482", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:08c502e6-9ceb-5572-a198-387f985a6d54", "id": "CVE-2024-38809", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2024-38809 is a false positive for org.springframework:spring-aspects 5.1.20.RELEASE-tuxcare.4." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:44d583c1-b4f6-5ff2-9aa7-7ff45982656d", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a9e375aa-2138-53fa-a24e-4fbd757bb719", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0a251cb2-a1c7-5d5a-ad43-76a10bf99a97", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:73684d23-cdee-5b3e-9dee-6d2769fbe5bc", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:da001ba1-d0d8-5266-a416-51a6cd1b1e80", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:65554f42-f6aa-5b41-a78f-0e7624d0b39c", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0e010fcc-b828-508f-bd66-cf1bab5b8306", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:855189f7-f86f-5159-b555-0445ebe8a487", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d6cd02bd-c410-561f-9132-490ae0b5728b", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bc01e8b9-50f5-551f-a441-0cd2543246c4", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e19354d0-c40b-5b7b-9843-eab87284a3c4", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:981db4b6-ac0a-56b7-bbed-e16b71b777e7", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aa363a4c-fb1c-51a6-88c6-0d00c740750f", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e878d2c6-6eec-51e7-8302-7d86b63e9559", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework version 5.1.20.RELEASE-tuxcare.2 is NOT affected by CVE-2026-41840. The target predates the vulnerable architecture (PartGenerator/MultipartParser) introduced in Spring 5.3.0 and uses a fundamentally different multipart parsing implementation (Synchronoss NIO Multipart library)." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ae288fcd-e261-5a83-b194-c755a3c5217a", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:acad1161-7b23-5106-93eb-087d78e3fefa", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:82a45129-ee66-5bc9-958b-0c7bbcfda288", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5a7b53e0-0632-5aa7-a783-c17bf8b72c89", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a77e8ec0-d608-56b3-a1b9-c50bd2add0d7", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:72e78d5a-d28b-5feb-932f-37ade4840828", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f20d0489-e25d-59f6-b3a1-9c0c601bbf62", "id": "CVE-2026-41847", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41847 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects. Spring Framework 5.1.20.RELEASE is outside the CVE-2026-41847 affected range of 5.3.0 through 5.3.48 and predates the vulnerable RouterFunctionDsl.filter API." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:d3ba0dc7-dd2a-5131-80e2-42a5374ba3ab", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:591b8a8b-31e4-55de-8abd-29acd59f1e4f", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fdf066e8-79dd-5c58-a0b2-f4d514f5728d", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a2ca106a-994d-5356-a861-1516f9298da3", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:642206a8-aa3c-5bb2-a222-e1b943d9c952", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e65aa8e6-1a98-583e-9b0a-24947cf8d8d4", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework version 5.1.20 is not affected by CVE-2026-41853. The vulnerability affects versions 5.3.0 and later, where a new native multipart parser (DefaultPartHttpMessageReader) was introduced. Version 5.1.20 uses different multipart parsing implementations that do not contain the vulnerable code." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f447811b-3b1f-5ce9-96c4-f05c5a4c20a3", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bb9fb30d-3d29-5e4e-b41d-06550e465f2f", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4458d54a-59f2-53d4-9a58-89bce29dd4ff", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:26d54047-79f0-5f74-844e-541cb869874a", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8e4d007e-2a41-5054-9375-ade2dc01730b", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:edff038f-c3e8-516d-9c78-6a1bd915b5e1", "id": "CVE-2026-47891", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47891 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1fec2c8b-bb30-544a-b6e5-cab0e7e37aea", "id": "CVE-2026-47893", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47893 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:cfb3787c-fd7f-58a1-acd0-3548e06e8519", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9d559f94-3e99-529a-bb4f-329c6648154b", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:a54809b9-0e6e-51ee-93b4-3be5b53fdc19", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:7e4df129-d854-55a4-bdba-a0e7ac2f33eb", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f22b5698-5679-5b00-b9db-e41fc6fdffcd", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 5.1.20.RELEASE-tuxcare.4 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.1.20.RELEASE-tuxcare.4" } ] }