{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:1b8ab48c-6fe4-518a-a611-ea6a735ae535", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fb6f3a13-4022-5179-be09-879bdb6a7b5b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e00162dd-cda4-5c8e-b199-3daa2deef241", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:920a7b90-cee7-5e1f-a2d1-e0291452061a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6c76efe1-6228-5fc6-926b-a5658b4b1fed", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:55433527-ba5e-5ad5-a158-37dcf8e67e40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b80ed6e9-471d-57d8-a9f7-09104124f920", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:477e01e8-76c0-50f8-99ed-857279b9ac31", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:fc992fa8-96b0-5b70-925d-b758c1fdc465", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:059b6bf9-8f09-5818-87b2-e109ee490b1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d882d870-47a0-56bd-bd4c-9d79be4c5a81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:67dd9760-cfed-5319-9c7a-413abb490e8d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:41108565-6f96-50b6-b0ea-2258fa70258e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8346837a-4105-5b6a-916b-ab633feaf395", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c688b81c-a861-573e-a60a-6c486ef6238a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d72ca6de-22b7-544b-ad3b-bd46a98e344c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0dc11e26-afba-5111-beef-9e457cedc3d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ea4c47a6-3272-5b08-a4ae-b3522a0595cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1e18a77d-be13-5d68-8e95-fcd472abf569", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23856e20-92c5-5c07-804e-22b883a4f84c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ba7b0452-b180-50fb-a61f-46d31152afb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e2d865ed-3315-5d72-b0c1-d014a61000a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:39cb876f-5eae-5055-a57e-6ffbb52fa1e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd2375c9-7092-548c-95a0-4402e6e43652", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:e502b205-d7f4-5133-bf78-99d293b972f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1a7fd395-ee27-5bbd-b124-8306fb0d41fe", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f47e6141-87a9-5e3e-af5b-2e1225bfbf4f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ed76f893-015d-5617-9689-700a94cd4a62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ebe650b5-7d2c-5021-b287-d80285030f7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:50d801fb-9388-5c83-9969-2db498001a2c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:da2bd444-541b-5279-9553-5fa4636cc8e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:93c9e413-040b-5cc6-b05f-4a04a0367d7b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:947c76da-447e-53ac-b1fa-95e65dc4bcaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:839cab7f-04e7-59a8-a69f-e1a391f35533", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6e722c41-29a2-5137-99fb-369812842529", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:66711d5b-3be6-56ec-aed5-6a226ee50d37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:70bcc768-7dd1-56e5-acd3-ffa88fa99abe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b59a0896-b97b-52f1-85cb-4a87e40decce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:426c4942-a7c6-5fe9-b170-15e4a4079a26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:be3f7bbe-4398-5d9b-8585-4f7479cc06fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:01d9e8df-eb59-5850-bf8a-9f2a9bd7a08a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2951aea8-0ad2-5fc9-8de1-c9ee1f8fa3b3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8a0f28d6-a53a-5a6e-b5b2-f2cc85c5601d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f7fd6b48-21f5-54b3-a0db-243c51f6e379", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:11ea34d4-98c0-5049-8560-ea1ff085a5d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:87dcf937-27bc-5c7a-941b-26d44e8aeee4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:378fdd60-bfb6-5e08-8376-6c3ef66569b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:faab5f25-06f3-571d-b319-a506be8791ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:369213d7-2d77-514f-8eb2-2454331886d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c5c40788-ff9f-5b7c-bc9e-52a259451193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3ebae5e7-33cc-5abf-b42f-ea3958774410", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@4.3.27.RELEASE-tuxcare.1" } ] }