{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:984113da-bc40-5149-b5cd-a749a7c9ce9a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11", "version": "6.0.23-tuxcare.11", "pedigree": { "ancestors": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@6.0.23", "type": "library", "group": "org.springframework", "version": "6.0.23" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6887af46-3245-5fcd-8905-f8434e740b94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:01af007a-0550-509d-b5bc-7057fe20c338", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:db4b1042-3b7d-54e7-becd-7df35f3a4cd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:cddfd3ad-f30d-595a-bba9-2c7b822925ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:e6a46f9f-d99a-593a-a25c-a805526ab2f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:a79fcb09-d730-51ac-bf29-1a66fdbd40ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:80b7673b-14ed-5ce8-b92f-23b917539053", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:733734ba-2074-523a-a962-89a86bfbfc6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:cb142694-ae37-54e5-8b20-16982e2a2f9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6b8d2888-53ac-52f2-bf51-5e7a16864e02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:8ee90579-91e6-52ee-966a-0a52587f1439", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:4d053334-2be2-5635-a596-4a12b898e5f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:e54e67c7-6886-531d-9e01-170e973049a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:41ffb9b1-0427-5158-899c-4866dfb67d1c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:9d9b30ab-61ba-5ad7-a4c4-97325e81f24d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:3c2154d0-f0dd-527e-9eb6-082bdd5b4ca1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:1c67436b-27f3-5b6f-ab4c-78a626c00f0a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:e318d951-fa06-5f0f-b2c5-707796a5ecdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:653f274a-634c-56e7-9757-f9d32d99f83c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:1380d2c1-69ae-51d4-a128-1f6acc1785ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:961c9054-3d74-5945-88bd-4d104b204572", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:958cc065-4d3e-5dfc-ac88-ac8c3ded25a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:a58589c7-7be9-5d61-99a1-a6c6f36b0a82", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:5006b5fc-4b9f-59e9-a9de-f9202d6d53b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:4e7b44f1-eca9-5721-bb7d-50d5fd60ce9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:5057b158-d1a6-5b33-a03e-6347366156ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:0a2f138a-d8bb-5fea-a7cb-8de5d2dd9c9d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:d2e2df2b-d273-5b1c-84c0-5d7ba60de340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:b8d1141d-c2d4-5a93-b6d0-5f43eaf13784", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:39ef3115-304c-58d6-b8b2-fe68ca3721dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:2a333fc5-4768-57eb-8e1f-6c6d28bde06c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:75d11bcf-e120-5d89-9654-1e1e71e9c592", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:88f1f59f-ef23-56ca-b1f2-890005723bf4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:2e2d5cdf-5602-54f3-bc26-15e0bb72a3a0", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.0.23-tuxcare.11 of org.springframework:spring-aspects. Spring Framework 6.0.23 is not affected by CVE-2026-47890. The vulnerability is specific to the Fragment rendering feature for Server-Sent Events, which was introduced in Spring Framework 6.2.0 (commit 622c1b9e8c, August 2024). This feature does not exist in version 6.0.23, therefore the vulnerable code pattern cannot be present.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:ed132767-fa37-55e4-a93f-916a5a9f8326", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:3fb6b6f0-3cda-5dce-9a3e-24db5d6df2fd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:710b11c8-9dac-524d-a053-8f3cc2e64cf8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:71443b53-bc32-5015-bebf-9d1a746e795f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:31849273-78d0-58ab-8603-9c072e4b87ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:028c814e-e9b6-56fa-9983-0ff66f46e8e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:30aa37b5-5def-5624-814f-56ba1d400207", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:6c9a8e70-c46b-517d-8d1e-aea3c8515d1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ], "bom-ref": "urn:uuid:c6383060-ffb9-5a83-a5de-0e09a5b1e8f9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.11 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.0.23-tuxcare.11" } ] }