{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7a2a1903-64fb-51a0-9970-8692e1d9784e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-aspects", "purl": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6", "version": "6.1.19-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:f00f4583-b55f-5980-81a3-8896bac8de9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:c3b83842-10c2-5a98-859c-56105b256e19", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:d67ead43-5472-540d-b7b7-6d8331b8978e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:1914d26f-693d-5fd7-a36d-04fe2bed6039", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:f3eb1ffe-0bbc-54ab-a12e-0e2322d2888a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:768a5763-0f31-53ea-9b15-e00f68d6ddfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:48dfaf67-ea5e-58ea-a0df-627abe1fa2d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:177149b8-c5a2-526b-b17b-1300114a7aff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:21bd8af5-c27a-5b4f-b11b-09a0e167ed18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:d00ad0cf-1242-5c0a-a10c-9029f608db2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:79f6dc84-d203-5059-a6e4-7d2df2392bd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:0be2ab5b-2c51-52a3-afde-c2a415bbc5a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:f00be4b5-e028-5380-9730-281196354bcd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:e27a119f-b836-5b7f-9c47-7228a4393680", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:6f62b25e-a3df-5918-988b-f8075647e9bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:41a1ff60-86cd-5e27-8951-7dde2fda7ecb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:5ccc57cd-6e23-5a9b-92eb-15fcdabf665c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:32b7d409-418c-53a0-8a1c-57d345132905", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:41231656-4351-5d14-bb57-c2379f125962", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:f072af90-b4c1-5231-9ab9-c2ec7069d430", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:32ba5b9f-4858-57af-84aa-4a225b67f53d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:327612f9-870b-5aae-b944-981143f66c12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:c5bb0ed0-182e-5ee0-af7d-3fad31f29fc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:1f260f82-01b9-55b1-af82-50a9c39ae6e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:41281ca8-ade7-5b2f-a9e9-9a64414e6bf0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:f9bf1dd7-1535-546c-92bc-6cc3ae1d9c74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:5ed8540b-ec26-5784-9a5a-92da44d5e3b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:15cc0815-3c82-59cf-a60e-defb3f4a48c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:de838e3c-3998-5bb7-bce3-18748e8e536c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:fdcfa3dc-1881-5e10-a960-1577f944ee87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:68d79683-c578-5f2f-8776-a3cd405c74ee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:11b7190a-6913-5e11-9cc3-8e2993055b15", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-47890 does not affect version 6.1.19-tuxcare.6 of org.springframework:spring-aspects. Spring Framework 6.1.19 is not affected by CVE-2026-47890. The vulnerability targets SSE (Server-Sent Events) Fragment rendering, a feature introduced in version 6.2.0 (August 2024). Version 6.1.19 predates this feature entirely. The CVE explicitly lists affected versions as 6.2.0-6.2.19 and 7.0.0-7.0.8, confirming 6.1.x is outside the affected range. The vulnerable code paths (ViewResolutionResultHandler fragment formatting and ResponseBodyEmitterReturnValueHandler getFragmentContent method) do not exist in the target codebase.", "justification": "code_not_present" } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:b4c5aa02-49c5-57bf-bf8e-fe808206ef62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:bf496e20-97e7-5636-9964-d28eda6c0320", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:bf6de933-7705-5df7-bcdc-60deb2f6a69a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:612d107f-2c56-533e-834f-5b73427968f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:60630098-a1cb-50c4-bbe2-b46549bcc603", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:b2cb4c5d-0cf8-5240-b043-8ffa0ee02eb3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:98fb3957-03c4-5bed-9518-66263f737f02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:7d63d910-9987-5710-b5b1-cebb33680447", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ], "bom-ref": "urn:uuid:c863d0f3-92bf-5103-b5b0-a5cb93178db5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.19-tuxcare.6 of org.springframework:spring-aspects." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-aspects@6.1.19-tuxcare.6" } ] }