{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8484f6d3-8ccf-5ee6-94cc-4f486d626d00", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2", "version": "5.2.11.RELEASE-tuxcare.2", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:31ba6716-f722-583c-a6c3-5c863c695ed2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ed3da32f-b01b-5752-be92-606d1f26ef35", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:19f755ff-80e8-552b-8d0b-97c042fc1156", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4770e9f6-d0f6-5c9f-8c06-58ec5f223e87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22118 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ae9f9aa2-eee6-5e96-a5aa-20c1913734cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f65e79f1-d638-5533-9830-441c0af76550", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4d51f669-abf3-5ef0-be78-0a22e7b0102b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7ce1242e-5ac7-52dc-b841-346e8be4f8cd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5bad4a57-d0ed-5ddc-8710-11b9cbc3a259", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1a3bc4fe-dc47-540a-97ff-600594bd702c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:45315c4e-9f61-52e5-8f85-81c38712313d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7cb51ffa-6c46-5932-bf32-cd2ed82809ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1c4aee0a-2fbf-544c-a086-4a9277ff5f56", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6a138e9d-6e83-5087-91ca-7e6019cb576c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ec234e00-b513-581a-b6f5-e07a64871f48", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0a73b7d2-e1f7-523f-9fc8-f41d8d0a8fe2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:76860653-1f2f-5355-a244-222b52e3dbd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:66156fba-210b-59e5-8e86-31aba2ffd37e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bc1a1daf-2ff9-5144-828a-9f2438bf42d8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop. not_affected \u2014 Target version 5.2.11.RELEASE does not contain the vulnerable code pattern from CVE-2024-38820. This CVE specifically concerns improper use of .toLowerCase() without Locale.ROOT in DataBinder's disallowedFields handling, which was introduced by the CVE-2022-22968 fix. The target version predates that fix and does not perform any case conversion in setDisallowedFields() or isAllowed() methods. T...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:de6ec81d-c5f4-5e75-be02-16acc9374bc0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:84406019-a2b2-54f8-bfa9-ca25200fc079", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6c4fd626-8d39-5f17-b467-67a1283ca066", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:57644ae3-93d0-583d-9555-4cca29e8fb16", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e13c8564-edbe-5e95-9d6b-83d940bc258d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dd4e8c20-ac43-56e0-aa98-5b0cbee10a90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bcfe18a0-1cca-5bb4-b5f0-36c0400fa124", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b8ee1b3c-7e7c-5aac-9fec-e33e62a32ba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:aeedf37e-580c-5a76-a990-a05a5649d92c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:a6f124b0-d29f-5fca-a664-30a396408ab9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0ddc2203-7e42-520a-adec-a976a36d1369", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6e4a161c-f82a-54da-9c58-bba41068cde9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:efcbd89f-7ffc-5c56-94b9-5abaf5d47734", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4c2e84d5-4763-571c-aa1a-e2eb8f06c563", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2d27f188-4fa7-5e4a-b7e3-fd0b456dffa0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0c287a4f-8316-54eb-a485-9498650a46d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9c4a706b-4957-5f83-b68d-e0a634571dea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:20190fac-c106-57d4-9cf3-b496bfd322ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8b5dc873-218a-5451-b464-c3b53f5c85f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2c7355d4-211e-51d7-b87b-a003d2070834", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:aed9d1a7-ba80-50d7-b1f2-767d4425fdd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:923c63c8-a9ae-51a1-880a-5b1f530a5fd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:281dc013-2652-57c7-922d-0b52e3f01abb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8c1a32e4-f83f-5fe8-97d9-2f922dffc742", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:30dfdc03-84a6-58ad-ac54-b1ac6aabeb44", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7a0844b6-86ee-507a-892c-407b90ff2c79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5986cb81-d1ce-5d98-9b84-d819e3dabeba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:520dc0cf-9a87-52e3-8c58-991b194c2fa4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b001c1a5-b7ef-5187-b989-c4f10630c6b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:fccdef0e-77ee-5118-a3ad-2294ba2893d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:30ca5dfa-9991-55a7-88a4-207f529e9ef9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5a8cffc0-2b81-5840-95f3-4da30cd9249d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:59f7e613-93d7-5a71-a433-250c5504663b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:38cafd04-e37a-556c-b34f-e975f53ba8b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:96327136-8de6-5ad9-b3b4-243cd4821371", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dff6b228-388c-5aa7-b51b-6bd9400251ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:49becbca-9b4c-5ebb-95a0-cb13b7d6f3cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:92d0e9d7-28c9-5b57-8c2c-3ffabb06d3a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:2629eb59-afaa-5528-a8f1-8f1a14c8628a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.11.RELEASE-tuxcare.2 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@5.2.11.RELEASE-tuxcare.2" } ] }