{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1527375a-af5f-521e-847a-364e4b31ba04",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9",
      "version": "5.3.24-tuxcare.9",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@5.3.24",
            "type": "library",
            "group": "org.springframework",
            "version": "5.3.24"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:d9853f9a-25e3-5581-aecc-8b725bbea150",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:78d8840f-1fc6-534b-b09a-35087854ac07",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:9552896c-2635-5e76-ae9e-27d31782f8b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:fe1526d1-44ae-5703-b5e4-87599542af25",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a67a280d-51f0-507d-88f7-602b4878ea9c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1799e64a-2cce-533e-9263-c9d788b1f40d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:e92f76fa-c08f-584e-9032-1d7e59674b18",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:f4f58dda-c8e4-5ce2-aecc-1e4913fe07e4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:82e3a380-29bf-5060-89e4-30b6450296cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c4606c83-2ca5-5238-95fa-7e2d4c807bcc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:ca123271-abd1-571d-a33f-ca8e445a118c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3ea0b553-c53a-5c65-98d6-83a658228840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3bb15666-8dcd-5573-b7a1-e0ca733b5f79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:a0468a4c-b574-5b9e-bfa9-7d8befec3c9b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:2458d2dc-63c9-512a-a550-7704a84a9140",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:c19a9e24-d5b0-5869-ba7e-7be6f9cf0a37",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:dc07a86c-efd2-5ca0-a78b-f3e745c9fbd4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:56f9b745-0bd3-53e1-816c-44bd5dcb278a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:abe08ee4-12f8-5b9e-8366-2f57b8d38106",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3e10f5d1-235c-5e1d-adad-30d94301ea22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:3030c4bd-d2f1-53c5-898e-d6c478e42754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:8edf1149-7239-5f68-b9cc-73fe71a02c79",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:524c9687-759b-503a-8921-77f1b5942a01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:9165e09d-a729-5246-80d6-02788ecb5bbf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:83ce978c-d30f-55ef-8e66-6780b9bf37c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:5baa0cb6-5a99-588f-8a06-d96b9c2117b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:81015416-47e0-52d0-9de7-568b63f1a614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:82d9288b-02db-556c-bae8-4fad95d99a35",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:1a82563e-f20d-5228-9db3-c954a15a1d54",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.24-tuxcare.9 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.9"
    }
  ]
}