{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bc71e7f2-56d3-52db-b4f3-5fb63d9f03ec",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.25-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a4f6a244-3c18-5418-8c5c-801a0e9c70de",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:249d9c95-d333-5591-98b8-00addb1e518c",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a4185df-a6ae-5672-8ea6-adbe14251f3c",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d68c5d5-2864-503d-9257-42def90183ba",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed919c46-ad0e-5492-b3a4-8ddfab2fbdae",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49397758-2cdd-566d-a042-51e73b021f8e",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36f5c48c-a763-518d-8779-989353dae52b",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94045474-14f5-59c8-848c-b75915d5c900",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ac676c6-96e2-5176-92f1-15d5046ac9e3",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72979e6f-d4e6-57b5-b844-3b5021796938",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86a9d175-48ad-5bb1-9712-b3007c9835be",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa657bfb-8115-5d52-8233-02bd7a9d20b1",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:250f960c-bc86-53b1-b5f5-5df6950e83e0",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d7aeb9f-cea2-5f3a-b7d2-9e5c968f6608",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09adbd03-48ea-5ce2-89f0-2270ef6cc49d",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d46ef86-4d1d-559f-8fe4-1fb568e4e13c",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ad03c08-59be-51ae-8d66-aea2feb7e10f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e0fdcde-0841-5033-93bc-78e3810181e1",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d1a8c26-cb85-5e57-a0eb-12ad605b95eb",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73cd78e3-36e9-5fd2-a72a-13c60143a9b0",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf106ae5-d069-5431-bd51-eae519c0a6cc",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76afd5a3-ff91-5f08-b12c-e21f33a30121",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce281487-4dd1-50a3-b4c4-6f9ab032c9c7",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0f22a07-8eb4-5713-8056-e89aa308914a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f30e58d7-4403-5a03-a944-91dff517716b",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e92265c-6b1f-5a3c-9306-efda274f2d7d",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9395f94-f982-5b9b-babc-c219b279c744",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5676a16d-50cf-5c0b-9ba7-1cdd4b75db73",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f008d9a4-fa1d-5185-a0f9-5f6aee5ca24a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d677335-c913-59d4-a290-ed71305c18fd",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59670983-d31d-54de-ac6f-c10e5ba50ba8",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2138e807-e333-5e1e-9530-8da94eb740d6",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.9 of org.springframework:spring-expression. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f19993e2-9fb8-526a-ab02-648457dbd2f7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ca7e2ab-ddbe-5614-84e9-c06cb6ff128f",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edca39c2-8c56-5fcc-961b-cce73f6f4475",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceb42c05-2244-5dc5-8ba2-5daa1fba941b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7f33a79-6518-5ab4-8ebb-c310f99885de",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4be28d7-d9a2-5382-b333-2fbbdc8e9a64",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34b7cb92-abf8-5f30-bbd2-69e74a27e770",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2171d2f5-389d-5e78-a5da-7447c08a60a9",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:955331cc-9dc8-5cf2-9e84-220dc2f8fd3e",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa41a73b-304b-5292-9ca1-46f155f5930b",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:049b7775-003f-53e5-af5f-e14876dd06f6",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c9e9b84-06b6-59d9-bde9-de736e9cbf46",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f97efaf-186d-53c9-a91b-d2ed5f8b4e8c",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73beaaa1-5d3a-5366-b0b6-c203b501d54f",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92ad4fde-0ee7-5c50-a185-d9dfb62b8804",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:983e6c70-0fd6-5914-b1bf-1926eebfdb15",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca4b134b-a85d-5118-b1a5-3b9de7ac2ac4",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59510ab6-2c7a-5ea6-b068-1bf65d8fbc2b",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b4722c1-c167-550e-a06e-022ce45ec7b8",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fe0227c-8119-5d54-802c-4ad115077df3",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49d42a63-3cb4-55b7-87c9-f546a074c1da",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.25-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.9"
    }
  ]
}