{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:83cad905-d474-574a-b7e0-acee226b1fca", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5", "type": "library", "group": "org.springframework", "name": "spring-aspects", "version": "5.2.13.RELEASE-tuxcare.5", "purl": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:dd24228f-e9c7-5e37-9558-84c28e996203", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0d6daf7f-4af9-5cb1-a3c4-d3121fbf2d88", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d7f91181-1fe4-53f9-a7b5-6124f9c68e60", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:62396bdb-1824-5d43-bf6d-3d85c0d50edd", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c8b3b322-0e7e-5800-a876-ee1acfa30264", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:e5edc0b1-c0f5-588d-ba27-4b6899ace362", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c099c013-a966-5c76-b38d-4673c83474cd", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9a1edc1c-76cf-5d6e-9a4b-99920acf9cac", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0fba1136-d018-5749-b4ee-e2bd25bd4f6b", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:53f2c310-4c94-56cb-ad94-6d02a97d0388", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:df5afe3e-b0bf-5aca-8a09-b370d323de03", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:92f481a5-5208-5160-8d8e-ee1f5618a350", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:61207bb2-0560-5427-bae5-ee7bd10fed0f", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:715216b7-1869-5933-b8cd-998b3ae04afd", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cd5d5e77-1372-5c9e-bf52-9086312e396f", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ffa6934b-b986-5cf3-b2be-f7ac9820cfe2", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8d652f75-c4ea-5eae-8a84-d7f85d55b880", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4876da1b-876a-56c6-b242-7bdf18baf0a0", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:acb2b8b9-baf3-5b26-ba7c-5867bb8e6863", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7fdde37f-d49c-53da-8e04-268f72b647d5", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b1106562-0040-5f3c-91bc-06509db1ac22", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:90b43442-17dd-5d3c-84cb-43ee018a554b", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:cb1fa4bc-fbe9-5694-9a0f-7241d536508e", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a9513efb-03cc-5de1-bccf-f79e831d53c9", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:10dce46e-5b95-5f12-bad9-a09991278eb3", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:31b0e629-b42d-598c-ba7b-4d36ce89e094", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b441bdaa-3e2d-5502-93e6-e78433d87d13", "id": "CVE-2026-41838", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0424ec60-9b4b-59ef-9f1e-43b1611f59db", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b16dcb3f-a740-534f-8e9a-b510c805f856", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6bd701df-48d1-5b26-b018-68f1095414fb", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:8de83b89-4ee5-55d7-b3d7-77c97ecb6cc3", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a41995e3-abe5-50c1-8605-4625dc749124", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:26a27a90-1c85-5456-8e56-b3c09385abe5", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:53e2ca32-2571-5101-a620-6d47843410c1", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:707c6d28-07db-51ab-bb12-7e791aa7ce93", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5e5247b9-d6d7-539d-bc91-14e80e6914e3", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:740db53b-0f5e-52eb-b97d-e2cfe9b055dc", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:36fd6411-cca0-5257-b767-d9eb6872a64e", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9c4e0deb-1649-5b26-a520-59d34a9c66b2", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:08640f5f-1976-5f5b-ba20-7091e2301cb7", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:98b239be-55ec-590a-80ed-7f2cd2a268cf", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b0055a29-4e32-520c-9537-ac599fb12ac3", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:701cd5ce-cd80-54c5-82d9-3ed2686b1e64", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.5 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.5" } ] }