{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c31fc6dd-d8f3-54ac-bd66-79e59d1ef778", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2", "version": "5.2.10.RELEASE-tuxcare.2", "pedigree": { "ancestors": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE", "type": "library", "group": "org.springframework", "version": "5.2.10.RELEASE" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-1000027", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:13f1cd78-f596-568d-8609-fea82bb409ff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects and will not be fixed. It is not a patchable flaw but an inherent risk of Java serialization. It is recommended not exposing HTTP Invoker endpoints to untrusted clients; if such exposure is absent, no further action is required", "response": [ "will_not_fix" ] } }, { "id": "CVE-2021-22060", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bb5419a6-46cb-5f8c-8c05-37bb5f14546e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2021-22096", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5c6bd162-a00b-5a83-a476-9dc5b5e933c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2021-22118", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4c2f40be-c2eb-585d-982d-bfdd083e2acb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22950", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:72b77145-fa36-5dd1-b4cf-83e350c874eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22965", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ddbed97d-094d-5563-9f4c-d486beba467c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22968", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:970b1995-19ff-5ae3-ae89-a195fc90f0ab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22968 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22970", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9a2c8023-0647-552b-85d2-307c74243a81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22970 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2022-22971", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ebf1fb4d-cfb7-52e3-801f-ef197a6edb89", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20861", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:b314ba59-98c1-540b-ae63-dc66914c8caa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20861 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2023-20863", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:28e29d28-eb60-5fd2-9f50-bcc57bde53f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-20863 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:4984121a-7335-5122-8493-59ec6792fad1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22243 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9835cad7-4058-54ad-b617-4193f69292a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22259 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:3e103d37-7455-5029-9f4d-fc81de1a365e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38808", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:15da8a74-a4a1-52fe-8a38-aa2e316c644e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38808 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8e610abc-eecd-57fc-9d1e-a1ecd041169f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8462c907-2a9b-5c1d-aaff-e0c9621d502f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:61c5a171-a6d9-5f2f-b276-ee192ea022bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:1239fdfc-6f10-5f8d-8b7a-eee702b4beae", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-38820 does not affect version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects. not_affected \u2014 Version 5.2.10.RELEASE does not contain the vulnerable code pattern described in CVE-2024-38820. This CVE specifically affects the fix for CVE-2022-22968, which introduced case-insensitive field matching using String.toLowerCase() without a Locale parameter. The target version uses case-sensitive matching and does not call toLowerCase() in its DataBinder field validation logic. Therefore, the l...", "justification": "code_not_present" } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e44a6731-3384-51fe-90f7-1c67aca5be70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bfd7e54c-99a2-5bd5-b60d-db6636d1eba6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e45e7cff-b43d-5572-b285-64ebcf53b6ef", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7ee53777-1247-59a2-8a32-22d04bc0e430", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:55f7d1bf-cded-542f-b7b4-c01a8fd96367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:88a97531-3cea-58fb-a3c5-4ea84d69e5dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:73153235-07f3-5410-a2b0-de9b9ffe3382", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:ef1b984c-ffe7-58bc-a08d-28e2b6aa4d1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:226a6e64-efec-595c-b02b-7a6ff58e9522", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:dc81f535-231d-5770-928d-9e46e1412c0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:93c8cee6-3711-5de4-b088-4863d296b9db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:aa32f471-230e-580d-ac97-210dc695f808", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-41840 does not affect version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects. not_affected \u2014 Version 5.2.10.RELEASE is not affected by CVE-2026-41840. The vulnerability targets the PartGenerator/MultipartParser multipart parsing implementation introduced in Spring Framework 5.3.0. Version 5.2.10 (released October 2020, before 5.3.0) uses a completely different Synchronoss-based multipart parsing architecture that does not have the vulnerable BodyToken buffering mechanism. The vulnerabl...", "justification": "code_not_present" } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e9b204b3-a267-53b9-a46d-f45a3d6e9a21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:98b33bba-344e-5ca6-98e6-844b45e37fc2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:60b3b789-1255-5fc7-9c43-e3f08e327df7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d8335b62-370e-5598-81e0-e264474a3722", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41844 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5bdac9d1-0008-55d1-8416-686c320bc0f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:f1865cec-00ab-55b1-92d7-4d9b2a255249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41847", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:42fef7fe-c802-5e99-baf0-e7586c797611", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41847 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:6b4d62b9-3599-5b67-8984-2f46e10cc207", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41849", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9fffa9bd-eede-5743-9fdc-3fca263be74b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:bf54514f-3925-5e09-8103-7ce2b612dc73", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41850 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:46d0de8e-a47f-5597-b218-89b4f9855c30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7f6e7f4b-4ce2-53e5-afec-3086d6eb8800", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41852 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e7e05dcd-eea6-56a2-ab0a-0fd36712f07f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:0372a62f-c5a7-5319-b503-22fa6d78e8f6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41854 affects version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:d58ddf9a-382b-5c5d-99b6-756428b4320a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e552ff05-8233-5ea5-9d13-cd6b0ea8b609", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e2253c93-b0cc-56ba-b225-f4dc0e4ee080", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:7f4fafc6-0713-5ada-9e32-b99f0d9190c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:e94c7d5a-1014-57a8-a726-b60fc39823aa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:26f87cd8-3825-593c-8090-d571acff5f52", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects. Spring Framework 5.2.10.RELEASE is not affected by CVE-2026-47890. The vulnerability concerns SSE (Server-Sent Events) view fragments, a feature introduced in Spring Framework 6.2.0+. Version 5.2.10.RELEASE predates this feature entirely - no Fragment class, FragmentsRendering, SseEventFormatter, or SSE fragment formatting code exists in this version. The affected code paths were never present in the 5.2.x release line.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:948d626a-6af0-594d-bd78-91b4de0591c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9b4899a0-3e22-5f81-8c57-ac6a3741f775", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5e4c3641-c66e-5b64-878f-9516616d13f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:8317d797-131e-5db1-8f12-7573990ac84b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:9ab888c1-c7fc-5663-97dc-05c62030562c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:eae54e85-4ad0-5fea-bea4-ce0bf833ea84", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:5e2ffe8f-0653-5ccd-9f58-17a3158b8163", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ], "bom-ref": "urn:uuid:47761983-988f-50dd-9245-433eff05ed67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.2.10.RELEASE-tuxcare.2 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@5.2.10.RELEASE-tuxcare.2" } ] }