{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:152b0c56-b592-5d53-9e49-f86b048cb620", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7", "type": "library", "group": "org.springframework", "name": "spring-aspects", "version": "4.3.30.RELEASE-tuxcare.7", "purl": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:69de6fab-2865-59c5-bc85-0761c7a637c8", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7bc32303-a3a9-50a3-8ff2-7425fb237333", "id": "CVE-2020-5397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5397 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:988aba3b-b0f0-5170-9505-4f5d85926538", "id": "CVE-2020-5421", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-5421 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects. Version 4.3.30.RELEASE is not affected by CVE-2020-5421: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 6327c60912cd80120040c8c16c3731d8bf6c19f6\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9b193071-0773-5b31-b28f-23fd6a41c991", "id": "CVE-2021-22060", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-22060 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:4b46b6ee-fdc8-56a5-b0c2-f3aaf792f093", "id": "CVE-2021-22096", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22096 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects. CVE-2021-22096 fix already exists in commit 4895b739b3e5fea63ecb01ac867c136add560cf6" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cc73d16a-acfa-55a5-b750-d85c0b840646", "id": "CVE-2021-22118", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2021-22118 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects. Version 4.3.30.RELEASE is not vulnerable. Summary: Target repository is Spring Framework 4.3.30.RELEASE-tuxcare.2, which predates the introduction of WebFlux. The vulnerable code (reactive multipart handling with predictable temp directories) does not exist in this version. CVE-2021-22118 specifically affects WebFlux applications in Spring Framework 5.2.x prior to 5.2.15 and 5.3.x prior to 5.3.7. WebFlux was introduced in Spring Framework 5.0, and the vulnerable multipart han [terminalized not_affected from patch_application_manual/not_vulnerable]" }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a065af62-bf0b-5269-894a-2c836ea0eae2", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:06527532-18e3-5ee1-bf3b-f69847eb1d1f", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b01b0759-c101-5ac6-bd77-c905180248df", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d4256e34-6e15-597d-9090-e0ff9b88aaba", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:55ef411a-d588-50a5-b94e-09805ef64c7a", "id": "CVE-2022-22971", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22971 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7e57da96-6781-5416-9140-bbfafad11d5d", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:34052e8a-5f2e-51d3-a0c8-e26c7c62e76b", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c8ac472f-c7c7-5284-9e90-96078fdbb987", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:15a4583a-f457-58c8-b3a0-cca12a07b6cf", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:42ec8729-f7a0-5f19-9a61-4bf9ace45a44", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7f9d5459-8f57-574a-8876-edbd3b68a213", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:037a61d1-299b-5f4b-be90-a1f682648b55", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a7349b1d-8b2f-5dc4-91de-9beb626f8802", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:00140fcf-47f8-502c-91f4-d6a4f092268a", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a32dc43c-1ca0-5b23-985a-8795d50ad768", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e39a7cee-cd6b-5ed5-80fb-99f4459377ad", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:041f95f7-933a-5269-83ed-4e2a7f83c9db", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:86e27770-43b5-55e1-8445-954e0bd74fb2", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f4a44e06-6622-5afa-a5d1-e8acd7486230", "id": "CVE-2026-22735", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22735 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:354499c3-7167-5109-bf7d-0826519bd271", "id": "CVE-2026-22737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22737 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:474f49e4-2f47-5ce4-b4d8-423c1984f214", "id": "CVE-2026-22740", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-22740 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects. CVE-2026-22740 is a WebFlux-specific vulnerability (reactive multipart temp-file cleanup in org.springframework.http.codec.multipart.MultipartHttpMessageReader / PartGenerator). Spring Framework 4.3.30.RELEASE predates WebFlux entirely - the org.springframework.http.codec package does not exist in this version, and there is no reactive multipart code path. Per NVD, affected versions are 5.3.x, 6.1.x, 6.2.x, 7.0.x only; Spring 4.x is not in the affected range." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:aad5be23-74b8-51db-8322-53019d60e5df", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ba79ef6a-2d9b-55af-a907-cd5070b31fd7", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:05dfc22f-cbec-525d-b5dd-56c5e11bf59e", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1ef6fc96-372e-5d0c-967f-71da8361dc26", "id": "CVE-2026-41841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0bbfe1d0-9bb6-57a9-a400-78ea197c3b47", "id": "CVE-2026-41842", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:308134df-ae85-59aa-8677-0d60c1ddc248", "id": "CVE-2026-41843", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d50c68e0-5482-5a0d-abec-8042c2b7c0e6", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b32f54dc-f186-5113-806d-c51e2c4e4f4c", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:b31bc7b2-4cfe-57b4-9f15-bd804fd2d50a", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8fdb03eb-31a7-5624-a102-7f3f2c8ac85e", "id": "CVE-2026-41848", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8026d4af-0c0b-5661-a2c7-3c182b79ace5", "id": "CVE-2026-41849", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41849 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:783dab5c-c6b0-5c12-8187-6f930f6768bd", "id": "CVE-2026-41850", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0e5ddb48-bcfa-5d67-93c2-9057f6a14d4b", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:75a46c47-15fc-598f-bade-eeff7635d9c4", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:20b50d3d-3e3a-5197-8cef-cfb8a7fd9ad2", "id": "CVE-2026-41853", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41853 does not affect version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects. not_affected \u2014 Spring Framework 4.3.30 is not affected by CVE-2026-41853. This version predates Spring WebFlux (introduced in 5.0) and lacks the vulnerable component DefaultServerWebExchange.java. The vulnerability mechanism - Spring Framework's message reader selection based on wildcard Content-Type headers - does not exist in this servlet-based Spring MVC architecture." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f9f6ee67-20ec-561f-8bd2-f97c79626b58", "id": "CVE-2026-41854", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:488ec220-4e78-5a55-b2a7-a529e210fab2", "id": "CVE-2026-41855", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41855 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:7cdafbe0-0d29-5636-bc09-197f0265a47a", "id": "CVE-2026-47884", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47884 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3da78162-9e95-5212-915a-26c406ac502c", "id": "CVE-2026-47886", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47886 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d5fb3bc0-8e47-5f4b-8b8a-5aad25314f5a", "id": "CVE-2026-47887", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47887 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dd9b7733-cb98-5c5d-9ee3-258f87b02b7b", "id": "CVE-2026-59280", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59280 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e73aee9d-e836-5a00-bf70-0bd043881ca6", "id": "CVE-2026-59281", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59281 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:91dcc43c-12d4-5c05-b25e-9f502e6a9a48", "id": "CVE-2026-59282", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59282 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ceb57ecf-75f2-531f-803e-a525b8dc1dc7", "id": "CVE-2026-59283", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59283 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:16ed1e32-2607-5eb5-a38d-1c73445a3245", "id": "CVE-2026-59314", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59314 affects version 4.3.30.RELEASE-tuxcare.7 of org.springframework:spring-aspects." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@4.3.30.RELEASE-tuxcare.7" } ] }