{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:96f8dad7-662b-5b61-b48c-c4cdfa915c55",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.29-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6f42b307-baaa-514c-8358-7757ab7af140",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8865ecc5-a74a-5939-90d5-ecde1f0c2444",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c5546cf-dbd9-585b-970f-e554c403f07d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a0c56ea-e805-5750-8159-2ef91efef671",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4faf197c-d655-53c4-91ac-14d02888651c",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08a6be7c-5dd3-5518-b216-c31e3fab5a19",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:934b7296-44d1-5302-a694-a611f8a2d236",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35bfcbf7-bd14-52b6-bd9c-c1933db1d6ba",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e259d1f-5527-5903-aaa2-3ecdbb8fecdd",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82b92fa0-746a-59ad-b4e2-638b76a0f242",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa8201a8-362d-5a15-b903-099d69501f64",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d4aa28d-697a-5342-b2c8-754def51fb25",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-expression 5.3.29-tuxcare.9."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:224669db-6259-5b28-afd0-20b00ede7cc6",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fa5d27f-c6eb-5da3-9e0f-802e15fd62c2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcf705f6-2784-5397-84dc-d8085debb4e5",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ed94b31-6430-51d6-ac25-0c9879d9dc99",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:898bd746-7e9e-5f1b-be20-9ea7f43bec87",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4ccabdf-3db2-5fc5-8b82-2d850055b683",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c96fe702-9c41-554f-8cf6-38d3211c311c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f04d3df4-c4f2-5460-8dcb-fce37208848c",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bff89bbb-9fa0-5a06-831e-02654bee5101",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ba098cc-1442-5759-b48b-a64e970ae3b3",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc9b2027-c30f-58f7-bd5e-f9e2ff08b168",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.9 of org.springframework:spring-expression. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7172c67-9ba3-5b0b-aebf-5996629e8ad8",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74fa34d6-f7f2-5073-b4a1-9cbaaa40912d",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4e0d7bd-39fd-51ef-926f-7596a5b91758",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa49876a-6c97-5bae-b0e9-ed9b6237bcb7",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcda4482-d3ef-5306-9f4a-a66bc207a2af",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:569ffa8d-b75b-5726-9748-b5813a262d44",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ec65fcc-ed20-5d4d-bbb4-fd4b4aba6fa8",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0966827a-f332-5afa-abd0-e77d23b0ecf5",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdc57748-d334-5279-9059-50a8ffeeb6a8",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b54e82b-2f31-5755-83e0-9dab860a6c34",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:289fe137-ad8e-5f97-b52a-e3e255fa958e",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cac53af9-aee2-5d10-a041-81163b88d24b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24807f02-446e-50fd-b801-fcb5bb34060f",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94a863e9-1671-52cc-afb7-d1d322d06c1d",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33c01d08-193c-593d-b43c-6a50e0c2e373",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bae0316-de53-555a-9cf2-dbbf02e9651d",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a12da7b-0ae4-58f5-a7ab-3dc02cd95a16",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d86bb606-fa13-5e96-86cf-739eb8fd79f1",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:590ab3e0-b08d-5d40-b6c4-fb6782ab4d3c",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:574c04f4-3893-5174-a461-ea0a1b306d35",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4d4fd18-53e0-56f4-acfb-5c3281f99f12",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba9162ce-f7dc-59f5-9832-b6d63a64f023",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e1b5033-8071-50da-af0d-3e7884c7b1b6",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e0d5651-9cc9-5360-81c9-81e37378da8f",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f40af720-bddd-5ebf-93be-54cf401c8a96",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d356e76-b262-5e4e-aba1-cccb4b20e56e",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58042f62-8f38-51dc-a451-3c8dc5eacda0",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58baffdf-d087-555c-a3c1-44fcb21cae5a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.9"
    }
  ]
}