{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1acb645e-7d99-513d-9080-25ae81c32886",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.0-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0da64771-4653-5020-9ac0-d0d02dd44c25",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1f7184e-a985-5fbb-b9c6-df506c942494",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f53ea9c-8dc0-510b-95bb-7844b56da874",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1e3abb2-6631-5f98-96fc-68dd5c71bf70",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63046b90-3c61-5cac-bad6-da166189d83a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:021fe017-6f0c-5dd2-81e4-5f6ef99bd66b",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd36fad6-dffd-5d0d-a344-4a2f72b3467a",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9259f40-10c1-58d3-88ad-394c8e96ed85",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfb5979f-1d16-50b9-b321-3f50aefeb813",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc195bdc-af77-577b-aaff-89706d86f8d4",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa804b47-f552-501a-94f2-9d2bd55a2756",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fda5b23-9907-563f-9a13-c4f407bdbaa3",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56d10503-2e40-5a65-8ce3-2128f682ad5a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ab06dd1-dc55-52fc-a685-fb2f35b0326f",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cc9f910-67cb-5d6e-8f80-c13685d584d0",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce8caf6c-dbc2-5d80-906b-e27f5ca02955",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86487e6c-fc0e-5afc-90ca-bd4e55c198f9",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7789663-f0b7-56d8-94ff-6308c1a6cba9",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b96a13e0-9a3b-59e0-a9a4-6fe8d1c61443",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:310303df-6a65-505d-bd08-08fce75c9016",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:647cdf41-f16d-5722-99c6-62da8dd07d67",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2571c75-ea42-5cb8-834d-600613717795",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21d2629f-1e90-5a18-b531-1071b8fc6d4c",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9140262c-94ee-54c7-9e44-8809a19e4f6b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38d9f2cb-26ec-57a5-a421-1198cd342f01",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e3b777f-00f9-5688-b7c7-bbbac7adfcae",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77f97802-891f-594b-8ab5-2aefd8688f01",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c77623de-9e21-5a23-96f3-577deaed10f1",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76ad12b1-2c82-5298-a2cb-48dbf96917d0",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68765517-0a08-5a5d-b51f-a02d4c7d55d5",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12f673ef-0111-55ba-8d85-080514993747",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:307e4328-ea77-5f40-a04f-b5bb09d68261",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbe04472-b390-559e-8229-222f62472aa9",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb1bb4f2-41f5-5ac1-8e02-05e7d14db0f1",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:628d8a3f-4c3a-5719-b05f-53b9f6e87eed",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3bb0bd7-1dea-5cca-875b-f2040f33eeea",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a37f5b7a-394a-59fe-8453-32d534c3f09d",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d12b8747-8a5f-540c-b859-78745c1c53d1",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84db1284-6e8a-569c-89e8-e8f8ba716528",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6dc2307-ecaa-5663-abc0-eb99df0beaf6",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f14bff7e-3e0b-5c12-ad4e-8079f8022ac6",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0077a49e-00ff-51d5-a7dd-634b1f370360",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e0160cd-8f0a-50db-a659-d37aedf852f3",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d56f1f3c-1efa-5bb3-ac8e-7e56934b868b",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2834a8da-5435-5e31-8aff-51dd2ae82b43",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96902d1b-37d5-58fa-ac05-3a6bf2c5921c",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3027661b-6166-5eb2-a6fd-c7fe0398fcb8",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c6c559f-2ed3-5627-8871-03fa144dd84b",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.1"
    }
  ]
}