{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:82e32301-0c84-54ca-91ea-743082442d3e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-aop",
      "version": "5.3.25-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ce6567cf-8493-53f3-9938-401a286c2f88",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49473330-5208-5545-862e-d14df0370198",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7aca514-8202-5a3d-9c51-0add9d9dd30c",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02d861ae-059c-58b2-8870-dd19ab37c951",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dbabea9-854a-535c-a00c-a7d0a8b32628",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae914451-9c2f-5944-bb98-6b3dab92f3b4",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2af30329-fb1a-5fe6-81c5-3938b56fa4e8",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21669a34-417b-5731-8c62-070c643e66bf",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e33f6a9c-0fb1-567c-8aa2-4585f357b5af",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d93365a-b1d3-597e-ad06-8713a2050835",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1e50ee9-7f64-502a-a3a7-82f0da1fd1ad",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69ae74ca-537f-5544-9aa0-7f3fde452cfd",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1a4bb27-5846-5e1a-b0e6-4f6fd9b94630",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28b78afb-9650-57ea-acaa-b51cbe1edb13",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee8bc660-ff56-5466-a0f0-ecc839601a75",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14fc957b-9b0e-57fa-941f-f9df85685305",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78d6423c-a656-55aa-a45e-0ba690c52a10",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e5f016b-9f10-54b9-a40b-db3ce535622e",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abbff3b7-8050-51b4-bd80-d961640e67d3",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a60cb164-eff6-5045-b1ca-e9ef1ef70a4e",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d05ef5d-f0fe-5936-84d3-c9d705033f72",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8290bffc-5d2f-57bb-ab32-3549b00b88b2",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a4afe33-6132-51fb-aed6-0ba8cb7bac8f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f042327-762b-55d3-ae14-5cd255aab81c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1feb51a-1a25-5a78-b1f1-195fd5cb0f1e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:082695b7-9d93-5ab1-a5a2-ff5e35909a1b",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:490762e3-73eb-5096-a1f8-6fc9147dc7b9",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3587e86-a997-5c11-9f42-815ad46835c4",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60708f34-18c5-5605-9edb-175b658c04a6",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:288c7d1d-b241-548e-8cd6-d9ce99bbfb89",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37505673-cba8-5578-b087-a018996aa9d4",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5e42125-6811-57e2-96c8-83eff303d79a",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.4 of org.springframework:spring-aop. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0b7b6ba-d30d-5464-a7d6-1323b8a41528",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3828ff1-f15a-534d-94be-8984fdca06b3",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59adc40d-e15f-5ac0-be98-5160d4da5e6e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8fb9406-abd0-5c35-a474-42138b4c50d5",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbadde14-d8d2-5639-abe3-8aebe96ca93c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:469832a5-8fc6-53e8-9576-6c6b466b282a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68136edd-b807-532d-af14-a98f6898112e",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-aop@5.3.25-tuxcare.4"
    }
  ]
}