{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c46a3e35-7d30-568d-8f7b-ad52b5380157",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-aop",
      "version": "5.3.31-tuxcare.11",
      "purl": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8a2bcafc-a9ff-511c-a5e9-04c2fa98016e",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe91317a-ce7c-572c-92af-669180ab3802",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64d1036e-dca1-5057-8378-01aa1db03d4c",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ab0ba37-b578-5c94-99c4-2918182a0c95",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:780f5761-493b-58bc-9497-27e9ec9e96d6",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8638942a-14f7-5bef-a726-71aa3950605a",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbdfd26a-13e7-557a-92e9-9a2dd7fccf14",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b8b2df1-c2ac-5eae-89f5-9dfb1f109d44",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa0443fb-522d-5891-be72-34472535c722",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20177f1f-d9e5-591d-8a8c-d8cc2eb2c8fd",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a604bb6-1ddc-5988-864b-e199c18f5587",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:007bda72-74d3-5a21-bdda-9cd67fe27dbd",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aop 5.3.31-tuxcare.11."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63130458-f9b0-5971-88ed-3d82b7ad4428",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c21f4487-666c-5f50-b7d0-c41721cc0f65",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4ddf551-88c5-5858-8058-cf7d1aa8f66e",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:587346ca-3ec0-5f36-9c56-be8f40508816",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06ece601-9580-59ad-9994-7b014b78666d",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8be4739d-d5f3-528d-8915-103e2c2bce4c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:488f9a02-c0aa-5695-b428-7fb54b5145f9",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18d4037c-a4ce-5295-8b1a-cd67181e7887",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36042f33-6201-5bc9-9b50-6cce4a7415c4",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c84582eb-7ebb-5262-8a24-daa0ac8f2696",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:458cbfe7-e908-584e-9717-2ba34b5f12d0",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.31-tuxcare.11 of org.springframework:spring-aop. already_fixed \u2014 The target repository (Spring Framework 5.3.31-tuxcare.3) already contains the complete fix for CVE-2026-41840. Both required doOnDiscard handlers were applied via commit 615477c88f (labeled as CVE-2026-22740 backport) merged on May 4, 2026. The code changes are byte-for-byte identical to the upstream patches."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cf2b132-be4c-5545-9b79-3ab544bad488",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f1737c7-6c97-5132-b993-d370a0c3f53e",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8af84944-2208-5ca1-9316-8eeef353056b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:725bcdd2-0e26-59d7-b0c3-ccc4fd23582f",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c14225ff-7473-562b-805f-78cce8cc5209",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0458fa7-3dfb-56ee-aa4a-4e189e793d9f",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:943a313d-6406-5165-b9ff-7e4e275c4c80",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81bb3180-5d70-59cd-92f6-3416b714f7c7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e2660c2-9bb5-5a49-8ae6-0f28d55cd84a",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:766ce62a-cad5-5ec6-b696-70c8e7e47020",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b62ffb6c-03d7-52de-92d3-91d5fd991a5c",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d45ff303-742e-5275-8746-c46aa346328f",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5611eb81-5672-56c9-adf5-3ca70d83d786",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9b35c2c-3796-522a-ad04-4479e03930b1",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b91c6a15-472f-5541-8a48-a0e084ff0568",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20e501ed-b7b0-5f2f-b15b-6d63491d0c0b",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:defb147c-7dc9-58e2-af19-7482fd97b7bd",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24800cb5-7820-5ed6-a89c-0cde4094c6e1",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8d556fc-f4a2-5fe9-a29d-6332a6847aab",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a065c9a-4b33-5918-ac00-0df26f72d874",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3c21c31-62ce-58f5-860c-1b997797f150",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a4f2b0e-2621-563d-8b1f-2f59b4acd84c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71259367-87ac-51d6-9248-cc44357a1b2f",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b882f3f-93a5-5518-8f44-66cc2135d8dc",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d965bbe-c54a-5a47-96be-15a74a4b44b3",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96030815-6065-5699-a25a-7c63bfe55056",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33f2c1e5-87e3-51f5-9d7c-7f93160eb141",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1b11767-b526-5fbf-82f5-8d97f2f12ee4",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.31-tuxcare.11 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-aop@5.3.31-tuxcare.11"
    }
  ]
}