{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3490e433-b200-53b2-b0d9-ffd743f5748e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.30-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:730c7db6-ed77-5688-a49c-654d8f519658",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:444bd304-f78a-5b67-9ce8-4a0928c925d7",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a21ee9b-5d92-5e26-bbed-d20501579df7",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49d83b6e-8dd8-5453-8842-e1ec909d2af1",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0432a8ab-36b1-5a04-8a0a-6a56c00d1a97",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7242da6a-84a6-52ab-8846-1ca4240c44ae",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e66c253c-cdfa-5c2a-b6b1-60ad03c99537",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e48036c9-4007-50e0-a9da-8609a4341784",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:153bf63b-1c00-5270-8802-e1fc8db11c90",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8f022cc-12c3-58fd-b519-8f0fb34c2a91",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eaebeeb-815e-5bd1-8a8d-4df97b903206",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d55ba8ea-f9e1-5a1e-9b8a-1062a8d600e8",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e97ffe0-1ffe-50e4-a74e-8125102664c4",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d0703de-9c7b-5384-8e0b-0a7f6e72dc50",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:497901eb-56ec-5715-84f4-2664f21c8337",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27357042-c9b0-5ef8-844f-b7879f159033",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63308bd0-5773-56e1-8421-2269313635df",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c905727-7b61-508a-a59d-51513b0dbc0a",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43fd8b92-52c9-5014-bfa9-19a4197f98ad",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1d8fefe-97d1-5d2e-a78a-adf79d0c4fc1",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:076f99d5-d328-5fdc-ac3c-e18457c46d87",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba87b063-ff98-5a4d-9939-195f4ac1eed1",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.30-tuxcare.10 of org.springframework:spring-expression. already_fixed \u2014 The target repository Spring Framework 5.3.30-tuxcare.3 already contains both fixes for CVE-2026-41840. The identical patches were previously backported by TuxCare as part of CVE-2026-22740 (commits 1a619adbfb and ee9443b0bc, merged May 2026). Both doOnDiscard handlers are present in the current code: PartGenerator.java releases data buffers on discard, and MultipartHttpMessageReader.java delet..."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21be410c-a119-57f3-84ab-3bdcf6540261",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47b138ea-c1e4-5a8e-a061-41a7c272f61e",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b13ffb0-ea7b-5e35-b701-f8c550d541a3",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec38b262-036e-5a72-bb93-de7be24e59aa",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b3db368-1f77-5279-99b4-4e57ce50896a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13121bfb-aed2-53b1-80e6-0e4f97d16ddb",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:862ac90f-150f-57f4-a98f-48fd3dfb4ee4",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba8034e1-08bc-52e2-80cc-e80ee1c34eed",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1da401de-8f88-5aeb-bf36-14ae4cfa242b",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1461171f-a2a5-50fe-a9b2-9941f1266a19",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7534d0d6-c436-5075-a94d-82441b624ca2",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5af5f6e-0910-5999-9a92-f03ea04dc2d2",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e4ae359-f434-5707-86e0-d18b7cb665a7",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6be1f4d7-4290-56a6-803b-76ac0e769f53",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:594eefa5-ecba-5717-8d07-756955772495",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a43e270d-df59-5dec-aab6-7ca0e5abee27",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da7ec22e-52de-5bec-9879-63602df36200",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9694438-d77c-5e40-8cea-79be4768c727",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e77ff8ee-21bc-5ee9-a743-9b5845a0cc68",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14a9c878-fe08-5dc6-aee2-5d4a670fe1f4",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e823f8e5-a8d8-5f66-8662-a5a9aaf04f54",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68731a6b-9c66-55a7-96ed-1026890c83d4",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcf22ef4-9d77-57a6-bf35-bff8536135cd",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ed774a0-5bbe-5b19-8d5e-2047326e1efc",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ac3a58a-41d8-5a14-b052-cb3323af286a",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43209ec3-65bf-5408-ace7-a10a9a317538",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cf9e669-1b4f-53d0-a0a4-d24e74592394",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ebfdf12-ff76-5b68-b278-473f46cf990a",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.30-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.30-tuxcare.10"
    }
  ]
}