{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5f095e80-9f92-5605-b278-8e507445ebd3", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6", "version": "6.1.15-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@6.1.15", "type": "library", "group": "org.springframework", "version": "6.1.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:373c35e4-cc63-5e74-a666-0fc399ee04d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:b5e033eb-777d-50bb-96ec-9299bb8c847f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:213fced0-d36f-50ef-9ac6-492728ccad6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a9b43d05-ef9b-5788-ba99-a19de8900916", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9b0f7eff-343a-50a2-9fc3-043b6fc8fe86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:0ed0bd1b-f4fc-5448-b737-c8a09904eaed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:04e92bda-cd20-5901-8915-69bd5095773a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:10ae66ab-69fb-50b8-ae8e-133cee2f019a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:10486a23-70cc-56d2-9609-d27160b80267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:90f6c51a-000f-522f-9639-14aac57f64d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:d15cd2b3-a743-5161-b9c7-6957886959e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9af671f6-5f92-5f9f-a581-c6756afc16d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:9d8b6b64-c51f-5afc-8e4e-5ba86f1d2c99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:454917df-5b82-5420-85de-5c061ba243d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:864818dc-b7d7-57a3-be74-d0d985233cd1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:2f2f79f0-9209-5f32-8f4f-26c4ac1dad64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:623ed9f3-6ee3-5b40-872e-c2b3e73902d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:5a7f97c4-61c1-5022-83a5-116a56cee815", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a15579d6-db50-5370-a7b7-eb00a1cb76cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:cf9891ad-fe63-536e-9cb5-8ecfbd5287c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:166113d2-df2a-5879-a7c5-73f8b9fc79c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:0fe96d62-595d-5f9e-940e-0d4758cbc7ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:0791d9f9-7390-5fe4-97c5-f44e4030d084", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:93ef2643-9068-5b96-b2e1-f231e822d9a1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:63171f49-4234-5f9b-ab9d-7866546cc42a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:5905e7f5-f68d-5c56-b1ac-441903210a42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:5745d5e7-cee2-5e92-b0ad-445265b81e32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:a347df6c-5cad-510d-9d78-699085dcc6ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:24e05244-2978-5532-aebc-0cb7428c02d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:533f50a1-0fd3-5083-9b7b-09e1c2d35e99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:49caa72b-82e2-564a-be8b-ef5d79ba9663", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:153941cd-79de-5ece-a7ff-28731ede3aff", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.1.15-tuxcare.6 of org.springframework:spring-aspects. Spring Framework 6.1.15 is not affected by CVE-2026-47890 (SSE view fragment stream corruption). The vulnerability exists only in versions 6.2.0+ where the Fragment rendering feature was introduced. Version 6.1.15 lacks the entire Fragment/FragmentsRendering API and associated SSE view rendering code, making it impossible for the vulnerable code path to exist. Git history confirms Fragment support was added between v6.1.15 and v6.2.0.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:dbe9e21c-fa3c-5017-bd20-fac1867186cb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:602ef58d-ebad-59d5-81d3-48d9bcc3d397", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:3c919e95-b949-5ba8-afdd-ef3e46059a09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:091e0b15-07d5-5fa7-9bdf-f104f5fbc932", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:274dc5f9-2f28-5e47-9319-8296ebae38a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:12766a2a-8f0c-50ad-a428-cc08ca8aad57", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:c8cb22fb-833f-5914-89c7-008a130a4a1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:b9a5a5cf-3384-5673-967a-66464c03bd40", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ], "bom-ref": "urn:uuid:fa9f3835-5537-5ea3-9f7d-ddb5196b201d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.15-tuxcare.6 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.15-tuxcare.6" } ] }