{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4ac429d5-0fa8-5e87-b85f-996914005c29", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11", "version": "6.0.16-tuxcare.11", "pedigree": { "ancestors": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@6.0.16", "type": "library", "group": "org.springframework", "version": "6.0.16" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:f279b47e-56c1-529a-a238-a2372fd7733c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:88c6fc19-23fc-5535-880f-b494bffd7073", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:76746cc3-a432-55d9-902e-5e467588e7fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:e80d2c5e-e2b4-503b-8536-88f05b650250", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:e6638468-efc3-574f-92b2-fd617be0cc6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:71719f1c-0b9e-50f4-b328-935db8a49a3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:57d3ef25-f5fc-5e92-b19e-6114231faf67", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:51723f53-e2cf-5f64-8b2d-867ff809c4af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:9fb0e431-156b-57b3-a4ab-81e408290a1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:47216472-b77e-5edb-846e-1628f4b584d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:dcc14bc9-ddf3-521f-9753-594db53c0854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:af9f08e4-0a25-5256-857d-b8665b008229", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:971a0694-73a1-5d40-9bfe-874203e2add7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:f75aff42-09f3-5b24-98b2-bf4ede7725b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:b199e4a5-3fd1-5f48-808f-8593cbd65357", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:96751362-0d9c-5adf-819d-54644bcf9b91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:9a964b28-e70e-57dc-b228-16e57708a412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:3bdaa683-c0f4-5dcc-b9a5-7308e416d716", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:6b15f006-f6b0-5c35-9b6f-6cf4aaa6cc0e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:3b3a8a76-4e70-5a25-a588-60a7bc08796c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:509a5cdb-d7cc-55fe-b6e2-8209f2bfaccf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:99c9c321-887c-5c41-9f1c-ce5ad205a096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:37653187-ce6f-5571-96a1-9e09c7d6f9c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:432117ba-f87f-5e40-b0c3-9d4ab7c7708a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:5d23d872-81fa-58b1-b003-5fb47c1081f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:d102303c-18b3-590b-83e1-47a8da83b698", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:13b722d9-be05-5462-9f19-9dbeeb02bc9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:f2b6dc80-061c-5ae2-a180-1fc7a48978f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:f39a3c59-9383-52f4-a23b-ed19114d19ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:0b856d29-c139-59a2-a20b-b41795fc76d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:905d1aad-8c12-58ef-ae64-63e30bb38f8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:0c1078c6-c2f1-561f-b47a-e87de4d742a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:a951e3cb-b294-5ed0-819b-d76a6e04ccee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:dee64e94-fb17-55f8-8ae8-ee1e00174736", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:136a1e4a-4bfd-525c-b1f3-b6dbc64c01d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:4a221a7f-ab4c-59fc-80fd-6d855548e8b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:27acae6c-8f68-5664-812f-169c458cd998", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:fe1b6087-2793-523f-a445-36d3837b421e", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.16-tuxcare.11 of org.springframework:spring-aspects. Spring Framework 6.0.16 is NOT AFFECTED by CVE-2026-47890. The vulnerability exists only in the SSE view fragments feature introduced in version 6.2.0 (August 2024). Version 6.0.16 predates this feature by over a year and does not contain any Fragment rendering code, the vulnerable `getFragmentContent()` method, or the flawed `text.replace(\"\\n\", \"\\ndata:\")` pattern. The existing SseEmitter class in 6.0.16 already implements proper CRLF escaping in its `writeStringData()` method (lines 245-268 of SseEmitter.java), using the same character-by-character logic that the patch adds to the Fragment code in 6.2.x. The CVE's affected version range (6.2.0-6.2.19, 7.0.0-7.0.8) accurately excludes 6.0.x versions.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:236dc954-ccfb-560c-806a-d2c7040bd859", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:77b11dc9-6431-5380-86e0-6677beb321ea", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:706dfc5d-fd01-5096-a791-836dace8298e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:000ea131-5554-5f58-a337-e4120f7c0a69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:430529c4-0dab-59f3-9bba-b909b6114458", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:d5baf032-7279-5419-b9e4-ccdcc3570978", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:4b6b3324-aadd-55ec-8c40-e8d06a4ce80d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:4a1c6d66-9ee0-5986-a72f-081bce96270f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ], "bom-ref": "urn:uuid:2275c6f8-9aae-56c8-890a-f9bbda309596", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.11 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.16-tuxcare.11" } ] }