{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:437125ce-680e-5368-b16a-33eaf446b957", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10", "version": "4.3.30.RELEASE-tuxcare.10", "pedigree": { "ancestors": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE", "type": "library", "group": "org.springframework", "version": "4.3.30.RELEASE" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:d38eefd0-b9c2-56fd-8eac-91e3d0901769", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2020-5397", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:12ea93e8-6c82-5b51-9824-b8f67becb071", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-5397 does not affect version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects. CVE-2020-5397 doesn't affect spring-framework 4.3.30.RELEASE", "justification": "code_not_present" } }, { "id": "CVE-2020-5421", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:5a3a0269-aba5-5a3a-b194-10c75f8f830a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-5421 does not affect version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects. Version 4.3.30.RELEASE is not affected by CVE-2020-5421: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 6327c60912cd80120040c8c16c3731d8bf6c19f6\". No backport needed." } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:1175faeb-8a77-5929-8660-6e2309835e8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:47388baf-8cdb-55ae-be12-afd275cb2a98", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22096 does not affect version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects. CVE-2021-22096 fix already exists in commit 4895b739b3e5fea63ecb01ac867c136add560cf6", "justification": "code_not_present" } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:911cc0ef-33ff-5f36-9b18-8d38555e16bb", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects. Version 4.3.30.RELEASE is not vulnerable. Summary: Target repository is Spring Framework 4.3.30.RELEASE-tuxcare.2, which predates the introduction of WebFlux. The vulnerable code (reactive multipart handling with predictable temp directories) does not exist in this version. CVE-2021-22118 specifically affects WebFlux applications in Spring Framework 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.7. WebFlux was introduced in Spring Framework 5.0, and the vulnerable multipart han [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:a2cdfaac-0fc4-5185-ab49-12f1c799ff64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:3975d24f-60b2-5cc6-9fa7-e5ff80fb34da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:1f250712-53fa-52ac-9fef-df72bbc0a143", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:2c79693f-bf79-55c4-b7b6-c7a9efa8ed02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:81c56066-2ff0-5821-9845-536c03994fca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:bc582ba3-2d3b-5598-8458-c1710de39ac8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:43ea0257-fb03-5360-8b34-2a2b92f5c10f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:3c4c37a1-dba9-5150-8f97-f23410485368", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:5a3544b8-e719-5bae-91aa-57634deb25af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:c8ccbf9e-fa75-55a4-99b5-3f226d6fd984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:90699095-0cc4-5879-9915-5aee344cf7d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:dd5b43f3-fcaa-57ba-a2e7-07760d300657", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:e4796e44-648d-5870-95ce-b11e90adc30f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:733cfd27-a4f4-5a56-b246-673c14a6d462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38828", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:990e4e00-4630-55f9-8b8d-15ab20717058", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:88962e39-df8d-5c8a-bfbb-3af59cd1924c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:b5047cc8-9779-5fea-a2b3-4c761becffee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:d8d3b4f4-0f1e-5c56-b045-478c601a68b5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:ffc999d9-5991-5882-8d69-d6998bf63c80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:2c7ef817-f260-57d2-a6a8-78f7b2b9b709", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:ee26a087-2cf8-5420-ae4b-246f23660bdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:9276903f-bedd-51b4-9882-fcac8310eff6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects. CVE-2026-22740 is a WebFlux-specific vulnerability (reactive multipart temp-file cleanup in org.springframework.http.codec.multipart.MultipartHttpMessageReader / PartGenerator). Spring Framework 4.3.30.RELEASE predates WebFlux entirely - the org.springframework.http.codec package does not exist in this version, and there is no reactive multipart code path. Per NVD, affected versions are 5.3.x, 6.1.x, 6.2.x, 7.0.x only; Spring 4.x is not in the affected range.", "justification": "code_not_present" } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:a17a2a13-dd7c-5c8d-aba6-9a99ba012178", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:d3049ec2-797f-5007-b4b4-0a0c54fae524", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:86e60516-4c24-5385-bf79-9384e0413c7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:12aa69b7-4c82-5515-9e94-0d195451b206", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:47b18ecc-d368-5aa5-9f07-2b3f528d9589", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:b8c22049-d7d1-540f-afc5-b482b788662c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:44b75ebc-b07a-55f4-bc3f-6231c3eea9e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:21b749cb-e7f8-531e-b350-1f8768a65dd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:d680b9fd-649e-5be6-a0dc-b740b448ef8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:745eec38-6c74-51cc-a5b9-71e2b05b8397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:b0b2368f-5413-544c-a708-75e273e64128", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:d47d838d-f378-5e1b-ada0-0a84a249acf3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:0491a0f4-c41e-5124-a321-887e00a0347e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:831dcee7-a176-5fc4-893f-0b1e0a4a212e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:289481ce-0992-5db7-a3e7-901d98953f4f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework 4.3.30 is not affected by CVE-2026-41853. This version predates Spring WebFlux (introduced in 5.0) and lacks the vulnerable component DefaultServerWebExchange.java. The vulnerability mechanism - Spring Framework's message reader selection based on wildcard Content-Type headers - does not exist in this servlet-based Spring MVC architecture.", "justification": "code_not_present" } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:3f4bb324-94ad-5ebb-8a39-2b1f6132aa12", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:3d9b9cbb-fc3d-5adc-a523-5fab182a93dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:f32f7760-333b-5002-b381-00df2f2667ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:b311581a-6ae2-5dff-8188-b7637f3ff83b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:1a11803f-369a-56bf-8fef-02e2871e5b23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:22b0f255-c2e1-5c63-b23c-57edc8ee5dcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:1422b136-52b6-5833-8b03-a06490c978c9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:5df457d0-1c5e-57c2-b964-5801e7735ee0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:4a7df1c6-0700-581b-b911-097d8cf60313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ], "bom-ref": "urn:uuid:11619b37-056f-5def-94a9-d260ecd02791", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 4.3.30.RELEASE-tuxcare.10 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.10" } ] }