{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f20cbd5a-0d4c-5145-a346-d12b91e06e8c",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1",
      "version": "5.0.19.RELEASE-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.0.19.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de93ecf3-121c-56c1-9ec5-d60fa67720b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:039f5c33-7919-5d80-8a81-838d64ee5ffb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3788d720-dfbc-516c-8994-6c246a3874a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:08b60bb2-2528-52d4-99b7-efb40fece2e8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e51bc89f-93f0-5f7a-a856-d62841e997df",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4b5e707a-c058-5b79-919c-347c4bcede24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3e5ccfb4-bff4-5909-b144-a49b27ae8a02",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4f374ec1-57a8-5593-a52c-aadbaedcece1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:41661d6a-346c-512a-a43e-6edc915dd963",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c3db9f8e-3b79-55ae-8cda-3c37937403ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b4720dfb-0562-50c8-90df-1134d6c8bc1e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ebb555cb-1922-5ac7-a336-6a16accbeadd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:507dccb2-2d07-5b2e-abfc-fc2dcd32adda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:80b2d385-b3e8-5277-bf9d-96311d7614e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9fb1bbdb-7f76-5be4-8f98-fe87c82e4fa8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3d77ac30-54f9-541c-ae96-17283c26a800",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7c1ccf53-24a0-53a3-863b-3671c5975767",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c26d1ac3-b790-5924-997d-b71a7f027d7f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:af4f3b05-696d-5263-9fa2-0636d424ed9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1368101d-c787-5105-900f-0c74739667be",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:696fa375-decf-5507-bb7e-3cd6ecd64b68",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8b38862-aead-5e67-9276-6635115071f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1d3c6181-860f-5b23-ad0e-6840244667fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b46a9ea3-99ee-5219-a823-f12349e65798",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:616fd1f9-5372-5271-a72f-5ad50dbe572f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:69ba4291-22dc-5d69-bc3b-377c054670da",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:85617944-2ecf-5865-9bd0-95f325c7be21",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8138efd1-ee5e-57b8-93e4-3577b20a0f18",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cdef191c-0f01-5e66-8853-e1f3d11b2016",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.0.19.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.0.19.RELEASE-tuxcare.1"
    }
  ]
}