{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:3db92e31-8945-574f-bca5-d27262dd4e8b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.0-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ccb43ae3-af40-5218-8d33-55bc2149ebdc",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87d50423-e7e2-5c9a-aad8-34f18e64532d",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40b1821a-1ce1-53ec-9b98-8dbdee4ca5db",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7f28f23-ab6f-580d-a574-2ac1785d759a",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f22d9414-c877-5d96-ac0a-27e8079a3065",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9973d008-e33f-52e9-a375-7e83f23003ec",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33dc394b-cff2-5906-839d-a60a886ab77f",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a93737a-5438-514e-b01d-0f7e4668c65a",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81448fac-a234-5390-80a3-a79f9af69f3d",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e617f15-03c4-5129-a10b-00bca7c7176b",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c57c047-4ef8-5b69-b956-e3d4d0698d1b",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4907e44b-29c0-5942-b905-9c9a06a2ce58",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c85c01ac-c0dd-55f4-9205-49ee8f44289a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ed533f5-43c0-59a4-ad04-d6fe3437e834",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46211db9-25dd-588b-891d-6967d52c8ca6",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c53b485-0d5e-55e4-bc9c-c0fdb7fc4121",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3709e36-1d95-5cfb-b207-54b282f786fd",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b295f301-5971-5ef5-8d66-dd617cc9bbd8",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60ac71a8-cb6a-5d8a-ae3b-cfbea56d38f2",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cf1ad96-5ac4-5047-8d09-0e3117533345",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6dffb37-d27e-5910-a033-90ce1f35f0bb",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a1008e8-58f2-5d0f-b9e1-e9675947a751",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e32c2dce-bc90-5ca2-915d-34bce911cf69",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5497df0-86d8-5ef1-92e6-6930783d9e3c",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afd4e3fd-5a64-5c80-ba16-fa2d5a449a04",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bcac917-abfa-5d1f-a115-de804db6a0fa",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63c88312-f011-587b-858b-e8a9e2433b0b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a4ebb7a-976e-55c0-a70b-4d03421e69fe",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67e064ac-45d7-548a-9acc-2055e049da72",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33b56b7d-d952-5ef8-81ad-98a2ae417bdb",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67c143ff-235c-565b-8d93-7a0e16c64262",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:107aee49-fbf4-5a17-8d2f-519e4cfb962e",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac354d43-850a-58a5-b121-e1c818f64934",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16612068-136b-5e39-8481-4085e784b969",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6043b60f-ae8b-5c53-bddd-a574bca5db88",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8011bf11-fa5e-5f6f-950e-288146cf427e",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:552ae88a-9816-5305-bc67-4be51a86a2e6",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b35afff-18cf-55cf-9e24-00b3f61456c2",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e6e797b-2e23-55fb-a361-417acc62924c",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c68a43d6-bed9-5661-ac5a-29c454e7b7d1",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b906ec6-77b1-572d-b557-133b35fcdb25",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d7f9b3f-3324-5ae2-bf7a-9e6de83cbfbb",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90bbaa4e-12f8-5a73-ac51-511823a1045d",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23372564-5fac-5f96-ba35-7565100e4abd",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a9b4e3f-7922-5a9f-9949-b07cce79c24f",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c94cd472-c8d8-5141-8cc4-96dae18077f7",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2d1ca5a-0350-57f4-91da-2c89937a8946",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48780fd0-9edf-564b-84c2-7f73dbfd4f52",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.0-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.0-tuxcare.3"
    }
  ]
}