{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:92660ca3-2611-5c96-957e-428e19cb45bc",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.24-tuxcare.7",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1d477120-7b07-57b6-a3c6-deada29bb2df",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e94ff33d-a33c-53fc-b905-c4630f9431dd",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a4c73c7-afc8-5306-a9b3-e7b1143189a3",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:582b63a0-4955-5df5-b8f3-bb33dcec27cf",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6968184f-8a62-57f6-938e-fbb07c77ec5f",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd682af1-532c-55af-bf82-5936d9a956e3",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bec2696-c048-50c4-8ea7-a1ab43f805f8",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:624249c6-560b-59c0-ac7c-67161ec5de18",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4355026-c8a7-5112-8361-9a4c5c72d6b9",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbacad56-84ac-571f-9341-2dafba5ba7ea",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3f314bd-c8e7-5d98-b469-5e69a7ab2316",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c800b614-f23d-5ba5-86c4-fd2aa953d9ae",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:354b4d4c-27a5-54bb-94fc-d035ea3a00b0",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd136be4-0149-55e7-96c0-89b316810d54",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f16313bb-6e13-54c9-971a-d9d1a7532076",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83de8cd5-e2c1-5e0e-bf76-b08091044850",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55ae200e-a6b5-500c-aa25-80c33b598ac2",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a6bc16-ce6e-52b7-b6d7-d56e182dacbf",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83017f1b-d3f6-54f1-bf93-b0bfb70c601f",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14b9bec5-d495-52f9-af14-d1d26d1c3dcd",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f31977cc-f792-5b8a-8923-98371e68b6b2",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e88e5f2-f043-5a2b-9bd7-d5dd94b7bd2a",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70bb06b3-a9d7-519c-bc5b-dd26f9fe995b",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ebba3c4-9ece-5642-b32b-74298ec7a51e",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e04ddc19-ddeb-54ba-9115-70c4b9ea3fa1",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.7 of org.springframework:spring-expression. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4b23b14-a30c-5bd0-8e76-bc8fb7c95c05",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50f6cbda-18d6-5e38-a0c3-02e571216d72",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbfca47f-6a3f-592b-bf17-9b60b5a1e545",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdbb2c92-8b4e-512b-841b-901af1e48edf",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d140f544-1a79-5e83-b7c4-0f21afc17146",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5c47d81-cce7-5d65-a360-d427fca2b514",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c03a2f47-636f-5f3e-89c2-b60c159bb0da",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12fa9cae-e2ff-5a5d-a1de-21ebf6e9e6aa",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef6e8fa0-8380-50da-8e61-97fa4891ebd5",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:389339f9-3db3-5658-873e-a11388f6f483",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cc08cd8-cbdb-5e6f-836d-43a4b05358c5",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccb323f8-7cf5-5f16-9c46-b1b73ed12a59",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc217483-86dd-540c-9039-48605afed777",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53c4f5c6-6f33-5273-90d8-e1bd31d57720",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bfe0b1f-02d2-55ad-aa83-0712f371377b",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f6e703f-9d4e-5ace-81a2-fb1f60dfb3ed",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:deb22861-572d-51c1-ad41-aa399e26fd9b",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ef0ddfe-676a-5ecb-8662-14fd638be6f4",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c39624e0-8b1b-531d-b080-0ab82bba4263",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24e11ea1-09b6-5636-a92b-3287645133a4",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21a80b91-961a-58a6-8272-56c0cf98026c",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7d66846-c998-56dd-ad12-dd6353a5eaab",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bce9319-f9d1-5e51-bf20-bcbfd49e27bf",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efdba964-811d-583a-b33a-ee665e303945",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08e03a10-970c-5ec8-885f-4633c9c54aac",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c092f14f-ad32-5994-a0bd-0427795f59fe",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a15235ef-603e-5dfa-9b07-5171ea5b3120",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11fcb4b4-be21-5305-bd6c-c01713c97ffc",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.7 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.7"
    }
  ]
}