{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2e5d4703-81e0-5bab-b1db-c9b95bc1efbf",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.29-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:04f4159e-72ce-5eef-bb47-0e251c82f1ba",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9110a7c4-c0b8-5464-86c1-d76cd4ba6163",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8054b287-3299-5fff-b767-e3641500a61e",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a2896eb-1ec8-5ca1-8e1a-db4e2031c12c",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49bf9831-f63c-500c-b168-ac8f6648f8a8",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:241336fa-115c-5b05-9875-fafd20b0838b",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:528fe014-bdb3-5107-9d02-cb1a79d3f859",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c576f00-3d6c-534a-b34a-c0fc1ea11714",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ff90799-7620-5772-b00f-40a86502106b",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c73834c-a8be-5c38-a6b3-4942b194c55f",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55d9cd00-4f76-54fc-a3e6-fe0ab8dcd52c",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98b79bd1-a7db-5328-acc0-59c44ac3976e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-expression 5.3.29-tuxcare.10."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7623ab54-270c-590a-9b01-fe12a9aca589",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd90975d-3b27-5d23-9046-d51d569856ca",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9607bc2-5e85-5fea-8946-c34b5e7c9614",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca2d537b-6cab-5886-af0f-782590a20376",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05638dce-9564-53ca-ba79-3d35809d6d3e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26221d4d-78fc-5292-844e-ffdeae4942bd",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e482a0bf-2ffd-5315-b04d-d9f811e1875a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81598d77-a855-53ff-8bbd-c2c0c59b7517",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40fb0ee-5ff3-5c87-ae27-96e426c3f55f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:badbda7b-0799-574b-abc8-a503187f09a2",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a855113f-ab94-52e6-9cec-7e63231210fc",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.10 of org.springframework:spring-expression. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d256e7ed-9964-53aa-b338-9a0400ea8f78",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6726cdd6-c850-59d7-a1c8-a7648f4e0a3d",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:617d07e9-a6b0-582b-b5b2-974883b68424",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da71d38f-0606-5bad-a504-c6e99ee68ef8",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8240b2-8790-54c3-a0ea-7eb6a33f5949",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f11ee9d0-e408-5687-8a96-28f1d1544eff",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34fddabd-ffbc-5b57-baab-6b24df654461",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8598d70-3ee3-5e86-9ec6-210a0e080f26",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6037495-06b6-5414-9c2d-b4fcce9f50cb",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cb6858e-02e8-5317-9cd7-1acc22bcc7bd",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2bd3e9b-7e3b-5a7d-88c0-cb67a8af02b8",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9950773b-143e-5823-8351-cdaca38f24a7",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ec32b34-ef94-5219-9804-e6f15508ae65",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cb20ce4-c76a-5f7a-9624-6449df54b693",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98e0fe4a-a47c-5ae8-b838-db9fac69f331",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d39a05da-bed9-5c51-91d9-13f090914203",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7646745-1d07-5b37-9a59-1c8ecdbb0ed6",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8fe718e-6f47-547b-9a2c-80a26fd77b0b",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f86d06-cce6-55bf-b27e-2e8eba7344eb",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f3fe65f-00a9-5a07-ac4a-0c4080f55d50",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dea37344-08a0-5cf7-a2ae-2e4c36b017ef",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5833eb64-4904-59bd-8185-8a72381b6be1",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ce987fe-1683-57fc-93d5-814d18d8e591",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a77e8097-b3e2-503e-b2ee-ebc34ba6b588",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7f484b9-acd3-5baf-be90-f04524767c7d",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a42ffaf2-73b2-5a64-acaa-87293607f407",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:115da94f-a3a8-5635-8310-a632ac34bf48",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8513764-5973-581c-bd72-f54dd46f9be5",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.29-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.10"
    }
  ]
}