{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ba40f55f-1604-5ec7-b027-19d4941a94b6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-aop",
      "version": "5.3.27-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3cdcb173-a045-536d-afec-63e72ab0e405",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3782dee9-8b0d-556c-9beb-c51fa9c5ae16",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3960ea43-ca83-5f2d-be08-ac1b209d6ccc",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc2b9ceb-c93c-51ba-ac2e-48c7e0f51061",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c57e112-63ec-5797-9a23-db3f2708e6a5",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf8922bd-c2c1-56e3-858e-9497562a2da1",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:faa1170a-e79f-561d-bff4-ef29a6eb2cbc",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f700fde3-0e74-5505-9dc9-046e8b1cf501",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b895c0e-c715-57bf-b161-bd44361172c8",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9791261-559d-52a7-acb0-7e66b5645479",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cc7d5be-69d2-507e-8a7e-fb2e5ad01842",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0fa21e4-1df7-5aa3-9ef7-36bd5e1b2a62",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-aop 5.3.27-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ab55159-f37d-5c18-bc90-0a710aa72ffc",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1600c0e-40d0-5988-879b-0cc1606c1a26",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a49bc35-0328-587e-bd5d-52678f385184",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97b5918f-ee98-5298-9f5a-abacc92a7b9d",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c09d7540-be47-5197-8f64-b8389985eeb9",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.27-tuxcare.4 of org.springframework:spring-aop."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-aop@5.3.27-tuxcare.4"
    }
  ]
}