{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b97d7291-fdaf-5b45-bb08-269365dd1b05",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.24-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e136b7c9-3842-5b19-a938-393740e8206a",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:327490fa-08f1-5b94-a3e2-965b56a29d45",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b70b4380-0d72-51bd-9982-ac1621699047",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cba8717-c849-593a-a96d-43dc767d81dc",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd86d255-a37c-5a0f-bd2a-3a20577ccd37",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76f855a8-a9a9-55a9-985b-12ed0f6497c3",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57e2340f-242c-5dfd-b8ec-655dcd2ea1d0",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:594929ee-703b-518f-a7f3-bd4c3e49efd0",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cb7dd5c-5f24-5ffe-88d7-7da98d3e211f",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01f6cf05-2987-598d-b735-dbf64ff93e68",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79d9d47f-60f3-5186-8f0f-59649d424e15",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7931a83a-755b-5925-9a44-9d38c15490c3",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8af27c4a-21f8-5dbc-96db-ceb4082d23d4",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab6d02ee-bb26-5fda-827e-c96924429b2f",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb064b16-d209-5276-b0a9-828a1acdf2ce",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9731336b-2a24-5f17-8666-8dab0d165051",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a236e0b4-62e6-5a43-a2be-e7eaefe74518",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b207d2f9-6a5a-56e5-a36b-d19f83d990d9",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:444b6a58-affa-550f-af4f-2040a8d2957d",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf0569d6-f4ee-5620-a792-4c628285f7da",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b66cae5e-b5a6-5d6b-aad5-18bc24a61b8d",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8978596c-929c-542d-aba4-4b56c3808dec",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:494e0dd5-2206-5bea-9f13-bc0abb5acaa7",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e535c719-7986-5ab7-9d2b-57bf08cebcfe",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28b71cb6-ce3a-5743-b181-c0e81c047e0f",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.8 of org.springframework:spring-expression. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c31ea204-c01e-5186-a5aa-e78c4dcb3b94",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d9893f4-6680-5d5d-8d54-b2ef7e2920e8",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b0f8cde-9269-5cc1-8552-137ffe71fffe",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:964fec0d-9395-5c16-916f-a4e4440d1d50",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01d36848-7bfa-5b5a-91e1-b6cecc6d77cf",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed13d703-f519-5ce4-aab4-cc3fbdc763b9",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6d73577-0d9b-56fd-bbc5-242df2fd2dc3",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ba04f31-e122-5512-8dd1-d920fe97eaa7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af6ebc51-cfe9-54d8-816a-8d0d772bfdb4",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8dee56d-9f99-5db4-9c94-0fbf86e55a39",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d4cda93-662b-5524-8684-945b73b50653",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9145f394-5baa-5056-aca3-abeea6820f8c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb6279ee-684a-53b8-bf6d-066d29f75d69",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:226b34ad-7e36-5ec1-ba20-6331e772ec06",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1266d258-adaf-5455-b109-05b036222a10",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af1f70f3-5eed-5d0f-9e8c-248600ba4501",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c7a49f5-0c8e-5fe9-9ae1-53d06c6e0ba6",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6687dc02-0a4c-5c48-9801-d7ea1abfb141",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:082ce1b0-76cc-5fe3-ba21-fdfb56a0f951",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38d80a9c-81fc-5967-a435-b69df69f4d11",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f179aa2-ce71-59fc-9f11-13301e73b08e",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb9e2817-f18b-59ff-a895-7d51a817346e",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c437830-f26a-561b-83b3-7054d9ece1a9",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:040a891e-76e1-5b2a-844e-2f7d23773d87",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c836f19b-d1ce-5fb3-9cd0-5d3a901a7f17",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc26e944-01e8-51e6-ae7a-4a5a118490ae",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bf3dced-8a64-5553-9e74-78a61608a7cd",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e9640fc-c248-5a69-90f6-0e28f3b6d27c",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.24-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.8"
    }
  ]
}