{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:85595169-3586-59ca-aa38-06d625f4d597", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1", "version": "4.3.27.RELEASE-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23d924e0-f993-52f4-a9e4-79908d3c8e54", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2a04988a-192c-50e1-95cb-e62ea8205330", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:bf0ab539-957c-5024-b470-8b05c3913afd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:261e520e-25ce-529c-b0a1-3195902c0a9b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects. Spring Framework 4.3.27.RELEASE is not affected by CVE-2021-22118. The vulnerability exists in WebFlux's reactive multipart handlers (SynchronossPartHttpMessageReader, DefaultPartHttpMessageReader) that use fixed predictable temp directories. Version 4.3.27 predates WebFlux (introduced in Spring 5.0) and uses servlet-based multipart handling via Apache Commons FileUpload with servlet-container-managed directories and random temp file names, eliminating the attack vector.", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0d8db85b-edcc-53de-b2ae-e89d8ee4a540", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:a016f570-0ed1-5bf0-9003-b95ffbd4628e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22965 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:5fc42546-89da-5eff-8562-7cb330e63d04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:96d859c2-0861-51de-be37-c43608b32901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4fd88b24-6b07-5422-bded-2d9558818c9a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:30b7cf95-c2a0-535c-952e-3b33e9f59009", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:beb52bae-e407-586e-8664-d667b03169d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7ad6e98d-4c65-56b9-be58-7c20778691af", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4df73a87-92c3-5423-97d2-1c1a2ad44f98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2e3eda8a-ec36-5570-800c-001d1be07887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:210fa6a4-88d6-5d4a-a4df-aa04f6cf52c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:1f083e6a-c075-5172-9901-0e1f575a29a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:413588dc-84f4-536a-8908-9e7165681037", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0200c78f-2715-553b-93a0-86da8aa45850", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects. not_affected \u2014 CVE-2024-38820 describes a locale-dependent toLowerCase() vulnerability in DataBinder's disallowedFields pattern matching, introduced by the fix for CVE-2022-22968. Spring Framework 4.3.27.RELEASE is NOT affected because CVE-2022-22968 was never applied to this version. The DataBinder code uses case-SENSITIVE matching without any toLowerCase() calls, so the vulnerable pattern described in the C...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f52ea131-a22d-5b2b-8092-e673929df6a2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b916ce34-4cd2-535e-a09e-b75f163df7b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2c641fd8-1174-560e-ae18-d0e2fac6c99f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:dd030e26-8440-5fc4-aa24-d8de2a4cb4b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:23a2eee2-4a8e-5d03-9ceb-4bb63c859ced", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:3621c397-ce80-5f5f-a9e1-79bab4097720", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ecd7a639-9672-5602-b5e0-5b6f51daad8b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework 4.3.27.RELEASE is not affected by CVE-2026-22740. The vulnerability is specific to WebFlux reactive multipart handling components (PartGenerator, MultipartHttpMessageReader) that were introduced in Spring Framework 5.0. Version 4.3.27.RELEASE predates WebFlux entirely and uses traditional servlet-based multipart handling with a different cleanup mechanism (finally block in Disp...", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0119d0a7-634b-51d5-820b-1469b85d747d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:2d3c40e4-17be-5c97-84e6-1d5717cd43df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:52948fd4-5548-5975-84d7-d0ae524de916", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:971c8f70-9f89-5c49-aca1-cfd6fa4d71c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0118e48b-39f2-5945-8169-8305e2a1fdee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f3c50bee-5184-5036-89f5-4897f2c26426", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d8246af5-1207-5dfe-b20c-6e78c07e0127", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:89e1a36c-785d-53c8-b318-f6a7f16d3cf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:4bb55eb1-f018-58de-9dd4-654ee31d3dd7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f0931000-f62b-557d-bafc-ce35e06305e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:44dd326e-b138-5697-ad04-1555d8e78966", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d29266ce-e99c-5df4-92d5-ef76a26634c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:f2b0d877-df69-5491-9ca6-dcd5babde921", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:ec55d84c-5bdb-5863-a279-088be2974407", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:120cc3b0-c2d0-5cbb-8530-ea7e1dd297cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:8144e532-3523-5670-83c8-a194c33c893d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:c162b879-73b5-5c71-bde5-9c1dc89928b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:36d4369a-f061-52af-9be5-769ab5f67634", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:297f0293-dad4-5ade-ab0a-e17bf500adee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:b33780dc-e849-5d65-8710-4f53fd33fea5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:d9c68ee0-2400-5447-abec-5f1e7a9dc6ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:0a5711fb-d804-561e-b229-2356e2f97aef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:7426896d-675c-5ea3-8bd3-6c9a722ad4aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:6cadcce5-cae2-5a79-ace4-e14ef95b0881", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ], "bom-ref": "urn:uuid:aa713644-80bf-54cc-975d-fa170f121a0d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.27.RELEASE-tuxcare.1 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.27.RELEASE-tuxcare.1" } ] }