{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b3bf9390-21b1-59d9-91bf-6098ed1a8dcf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-aspects",
      "version": "5.3.31-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dcf3109e-59ba-5ffa-a880-e94c701b708f",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36709467-2c88-5177-bff6-78c6b40ffa4f",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb5e6fbb-d9c4-5de3-adfc-55f2afa3717d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e40dae42-f4d0-5201-9246-a9d260944322",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c8fd905-ca43-5308-b926-e55864bb8dc4",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e663b33-c180-5ad7-8a32-ccac0a34d7a5",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3638b4fd-5c75-5968-bb66-aca54c1f5615",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea0d627a-3fc6-599c-a921-a8f6117896be",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db1396e2-73da-5e5b-b912-d79c983c52bd",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7485e49b-e0a1-5844-8257-353ab1e97823",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a947437-df20-5ef8-9585-44e238ce9c30",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe871721-4ae5-5eef-a43f-f1b183984c80",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aspects 5.3.31-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68fcf2cf-39be-5839-819c-05baf27664b8",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6db5f41e-9ae8-5e0b-ab28-d6338d996dba",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83e3396c-0971-5dc3-9375-e1dfa760deca",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abc7245e-a73c-52e5-97e4-8925d2abb115",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f4ac2a8-d1e9-5982-bd4b-5b28059354f6",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00d176d2-7471-5a5d-85ee-2c4738d3932d",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b59a3a07-1aae-5bda-9599-1365ae3f2094",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39d64a78-25f0-5276-9105-5343772f6727",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3770f5c6-93b8-5873-8d9e-90cb658a0e15",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b50b40-a4bb-5488-b429-1c3478c81662",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f8f14c4-a68c-5ea8-baea-ced9ebf1c0fe",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.7 of org.springframework:spring-aspects. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2a065ed-a358-5ad6-ad05-c3dfd4e8527e",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d46b04d-7842-5383-919c-11187d9ec502",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa2c0309-9bc0-5e23-955a-3c4118c0e391",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9efed7e0-155e-5696-bc02-3425efcc170a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8cf7dd9-7fa0-58d0-8285-f423b10b3a8b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f77d744a-8d3d-5539-9abf-e80bafdb7563",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a10bb9a4-1e45-55e9-9a37-1a7db74fe5c0",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba4c056f-e819-5608-965a-45ecf05d4cd7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3586c12d-e181-5c3b-8255-ce3eacb38cee",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:daa4835f-e149-5eed-a0bf-488c489e3ef8",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78be43b1-1777-53fb-8a15-81dbcaea2fa4",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ef74b69-8b8d-50bf-99d7-de0a0d56f38a",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58bf02da-dde7-5837-b93f-e207a6d1e1b4",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d084961-a5e7-58ba-956f-c7b9f52f4ede",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.7 of org.springframework:spring-aspects."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-aspects@5.3.31-tuxcare.7"
    }
  ]
}