{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b19e948b-b1dd-5731-b081-d4c3ee22b11d",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1",
      "version": "5.1.8.RELEASE-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.1.8.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7fd7e93d-61b6-5082-bc89-328b1051c254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c9cad23c-6376-5993-bc16-7493b7fae41c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9c4a7ee0-ae03-5044-91fe-015ff9b605e2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a8fcc781-c01b-5060-84fb-398a82aca851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:75483861-781d-5074-9adf-65a33c7cc56b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ed7bc87b-d13c-57ec-8940-3fee9c639066",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a42677f-a5a0-5bce-ac5c-244ebb44240b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4ecc5e4e-4271-5d6a-a9ae-3813cc4b8a52",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec49cd86-cf3c-5c2e-a947-802903c315a3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7fbe425e-c600-5dc3-b46d-746d692c030f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ffd420c1-7657-55a0-b50a-57a8a92284d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f3b173f8-a0e0-51f0-90e3-e9fb599a5f68",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:35d35685-c532-558a-9463-f3896e0226e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ebabee68-7a46-5c46-8101-5bd78e04fa10",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4e696db0-26a7-5df1-b10e-f96107f1dc2d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:48ef1c04-f5a0-59f4-848d-c9b024020343",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-22096 is fixed in version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8c0471e0-2981-552c-afc8-b9604e8181c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ff2e549d-db16-5084-85d7-1a7e7b1ff411",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8ed6355d-3ee0-5aee-b1de-46285760ff72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6bbfbf30-4a68-59ca-9596-385f8c601266",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:48a8c4d0-d1bb-5d4d-86d6-c22137e9567f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:448726bf-e3d9-5904-95a8-86a8fb57deb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a47e3cab-d8eb-538b-8095-68d044ec78ce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30fc007b-8db2-501f-a8bf-4c7b441caac4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:61083719-68d9-5aea-838e-7d641e484133",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e0c8b4bd-41d7-5635-aac0-fecd559af9a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:85969624-d95c-50a3-baff-a2b8de77ca2c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fc170771-6fe2-5357-ab1d-3383e1662880",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4eb60ade-9693-528a-a393-80cf29ef72a9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.1.8.RELEASE-tuxcare.1 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.1.8.RELEASE-tuxcare.1"
    }
  ]
}