{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9381cb39-b955-5c90-bbca-1d84519cb01d", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2", "version": "6.2.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-aop", "purl": "pkg:maven/org.springframework/spring-aop@6.2.3", "type": "library", "group": "org.springframework", "version": "6.2.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:69e77866-4778-57ca-a878-b26ea515f310", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f4587588-89c9-572b-8b60-1bcbc1ab96b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:75dec4dd-b236-579e-bfdf-bf771f2e187e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:46d81779-0cb1-5e0d-a9b5-e915a9e0f17c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:75a703ed-b5f9-5055-b8e5-bbd59a8feca7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:557fbdf2-2a6e-5f9b-83c6-e5ddc3ed08f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c9e34d0c-b284-5222-886e-152704f5a250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:53ce9f0b-7dcd-545a-a95f-22bf7fb39156", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:eb9bc6d6-1214-5eaa-b056-e873fe0a52d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f3e8d22a-361b-5af9-946e-e487add4320f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:166a37fd-c6a1-53ea-b772-a83748dc66cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b7ae91b8-5f30-568f-a90c-a6bf56ae631b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7f785e08-3526-58bf-b2f0-ca6072940d5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:7375a405-e6d4-5a50-8c10-b19c707224bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2bd12c96-4c0f-5ad0-8acb-fc5b6016de26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:d2ae4c60-d041-548b-a88f-3a9cb2179201", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fc97a691-c7cb-5d2e-aaf5-41176ea360fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:aedeac6e-582c-51ab-b97f-0f4b2fffc1c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fda6ff02-7bd8-5bd8-b303-208fcc0774c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b2447229-6e68-5af1-8aaa-a292a287a469", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:01dbb1f6-c4c6-5f8e-b51b-4c9ff824f4f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e97ed1ec-b30e-54af-a1be-c33b9c3ef761", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.2 of org.springframework:spring-aop, and is fixed in 6.2.3-tuxcare.3." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5ef0048b-d9fc-578d-884d-686584af4659", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:30634a66-cd12-52f9-95b0-36cd5264c246", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:22255a73-1233-5461-94c6-de7d181eb430", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5f587b0b-10e1-5b7f-94a1-e568d196f95f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5a74435c-84dd-5da6-a01c-3f3952d508ce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ff99067d-f81e-5380-b87f-3ef01fbea786", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:713b4c3e-3dc6-5ae3-aa2e-38b24b0da535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:ab8172ce-a754-5b6a-9d29-6a1aa594f4b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e06fff5a-b467-5eaa-a989-e706e2852ab5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a3391d2d-ca4a-51ee-bcb8-a4ab16c91f37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:6d46dcf2-f844-5384-ad3f-21b8c374390e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5f083686-f20d-5630-a684-88f6377abec8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2e32460a-dcbd-5f7a-b08d-eb834486695a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:709751de-8dec-5420-8d3c-5e46f9aacde4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f7136005-a8f0-5a8e-af1e-b56826d5bba9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:14c0311a-6893-5d1b-952c-3a2c4194837e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:72a41b1a-b770-5234-b338-c09d97326016", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e022e667-7312-593a-ba4b-1024113a0019", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:0a92d1a7-1048-5e46-b557-45cc2b413e62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:69fd0560-d1ce-52b3-a037-cd4ed1f0034a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ], "bom-ref": "urn:uuid:760fec83-6146-5037-b24e-fe0ac6dc1d9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.2 of org.springframework:spring-aop." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aop@6.2.3-tuxcare.2" } ] }