{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:6549fb38-b1f5-5fc2-af92-6e600d6a7da2", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6", "type": "library", "group": "org.springframework", "name": "spring-aspects", "version": "5.2.13.RELEASE-tuxcare.6", "purl": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:2bea6cd5-3d10-57ed-9e19-1161cb5ebd64", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a8c00b73-f0da-552b-8f59-9f81cefbe167", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ae9ff511-a490-53ef-bbfe-fb96e274335b", "id": "CVE-2021-22096", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:d0da6fe9-3bc0-58f4-a1af-3ba658a33d3a", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a67c4ecd-f5e0-56bb-8f09-c0800ae61cee", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:50bcaf16-8a2b-5afe-aa14-22ad7b424972", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a3af584e-6620-50d4-9316-874975bb8231", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:808ff116-4184-5061-8055-a4e359ce6964", "id": "CVE-2022-22970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ad7e330a-afd2-5585-ab7f-dd4a67967ece", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:5f568bd4-aed3-5b0d-acd3-31e463142664", "id": "CVE-2023-20861", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:4413e570-d0d6-514b-9503-481e49cd22f9", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:61fb9ce9-6348-58df-93e5-037bdfdc07a9", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:33f31592-fea1-54cb-bffc-3ee2631c56d0", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:0188fb45-43d5-5275-8333-3a76a95a9680", "id": "CVE-2024-22262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:842bfbeb-f02d-52bb-b63b-9aeb8e02deb3", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c1d1c91f-665f-55f5-bd24-4f7eb38853e3", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:999cc6e3-ad49-5cc7-a978-409f3bf03fb5", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ad833a95-e20f-5fee-9b79-a3862c79f06b", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:18f2a8ef-b9d6-576f-a93b-521110f426f6", "id": "CVE-2024-38828", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38828 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:683f2d44-efa3-5559-a955-1cc46d02323d", "id": "CVE-2025-22233", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c658b5c8-fa1b-5c43-8841-d202ac203ae6", "id": "CVE-2025-41234", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:409b27b2-4be0-5949-ba81-97db3bdc094a", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:59365dff-2087-5407-93a8-1c39820da562", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:37064f95-c11b-56c8-828b-cf04decabd55", "id": "CVE-2026-22740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c7ef3bf4-de7c-5f12-817c-5303dfbb1910", "id": "CVE-2026-22741", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22741 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cfda228b-ad6c-5fc8-8c1d-de60fcaf6402", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:6289a874-2b1c-579e-b735-d0086e7111ea", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:8787b992-c4e1-5c8e-b006-95ea9253e41b", "id": "CVE-2026-41839", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cafa21e6-ad80-5b5d-90c4-8615b60ba593", "id": "CVE-2026-41840", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects. not_affected \u2014 Version 5.2.13.RELEASE uses a fundamentally different multipart parsing architecture (Synchronoss NIO library) that does not contain the vulnerable components targeted by CVE-2026-41840. The CVE explicitly lists affected versions starting at 5.3.0+, and the patches fix issues in PartGenerator and MultipartParser classes that do not exist in this version." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:fb1acb98-aaf0-5d95-98ea-725a493e946f", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:39e64c5e-3cbc-51ae-ac66-6688cd2210e0", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:e1b6e451-3102-5cd8-b63b-1c1ae747f950", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:cf613f8f-56d6-5110-9d60-fe849285e375", "id": "CVE-2026-41844", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:ec1ed298-48fa-5c23-b490-a1249ba3894f", "id": "CVE-2026-41845", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41845 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:88c106ce-d9a3-58c6-a330-f9d95f32372a", "id": "CVE-2026-41846", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7575225d-f5d3-546e-a010-f4d4c54f2049", "id": "CVE-2026-41847", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:096401a7-1a3f-5c51-98e3-243daaed1e96", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:82f78f93-1693-5b08-9698-85586eb06abb", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:389ebce8-bf13-50be-aa2b-fab4e2e6e9c7", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:1d709648-5e1b-5ba9-9c85-ce7798a1eb00", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:c6afa809-a82e-59e3-a237-98d133ff35d3", "id": "CVE-2026-41852", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:a724816d-4004-5bfd-84b5-85b878f3cc86", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework version 5.2.13.RELEASE-tuxcare.4 is NOT affected by CVE-2026-41853. This version predates the affected version range (5.3.0+), and analysis indicates the vulnerability was likely introduced in changes made in version 5.3.0 or later." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }, { "bom-ref": "urn:uuid:7806ac2f-5946-52a1-8606-604631cc6088", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 5.2.13.RELEASE-tuxcare.6 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.13.RELEASE-tuxcare.6" } ] }