{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b0211df3-67c4-5c24-b003-74b62aadb916",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.11-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f88a8190-adbb-5c88-8e9a-a743302d3229",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4c3d2ee-93aa-5358-b1a8-60f4bc3d377c",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66be4cb0-d867-507a-86e8-4f2f4f9aea16",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b739cf79-ef26-52ef-aab8-f90d62e9b4e3",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d824559-18a7-5b90-b1b4-108395c77f12",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd08a0b8-b067-54c3-9ebf-b1e2f6334b4b",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77773f42-a248-5659-baea-259c0f4068c7",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1113dad6-ef93-59b6-afd3-3a9f3cf4ad9c",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d25de71-b1f5-5c1a-a236-7c8969abb0ba",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3058a04-014a-531b-9493-1a1d673f2a1f",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f29ab8bc-f786-51af-b1de-0b9ef61b6eed",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adb58b23-866c-5054-9aa0-e47768a75ca0",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2384bf1-9c62-5b51-a84e-4eee474d1241",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c57db4c4-8364-5142-a75d-cca95e42aa64",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb3f903f-796d-562e-b8f8-9b200d4af1fd",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa6f32da-e100-5123-9833-d4fde412edbe",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df9685e0-5ace-57ef-a139-37e9a04604c8",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e015a99-863f-5a43-8713-ac348bc1e490",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5238ff4d-bc66-524f-9eb5-b6c72aed8a9f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12efcbad-2478-534d-ae81-9c59d7214144",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c537e78-a885-58a0-a8cc-346ba3083ccd",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9982c8c6-0ed7-5104-a476-6f82b6d88258",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3113fb9b-8e88-57bd-9ee8-88e5c7aa9066",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14e30748-7b66-50e7-82d1-1ed7f3181c6e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78e98ebf-abed-5bec-8afe-652568d8df79",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e66839a4-aac5-5605-843d-e62ab1495b42",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c5b52db-8ec5-55b9-a793-3eaf837bbb4d",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:570ffe80-dc46-5f05-905d-88572b73b484",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa6899ec-cd86-5076-9e34-1bf4e41c572b",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd4631a2-a46f-55b5-8f6c-46539a057ef1",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c957ba8-682d-5505-8523-9d8a27b9f0cf",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3515053e-6de2-539c-863a-6b3dfeaf8495",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d566d377-8f13-559a-b52b-7029b19d6de9",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc8b3909-ef38-509a-aec5-2fdeb3101f52",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d85faf0-0428-5c3b-ba32-8705af5b387c",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7b1d1a6-2299-5904-9203-99f43278ff77",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b42c2a9f-80c4-5ec7-9b61-c8306abc4e2d",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a5ac026-535d-5eb5-9084-587661a4d89a",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d9c93b1-f988-599f-b700-ad97bebab307",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:389c7ecd-393f-503f-a1aa-fce988ba6625",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1554e53f-bd83-533c-937f-27a035b92001",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28d5b100-2d49-5f01-ba09-8e83206a3cd9",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:015b564f-6c3b-5d29-9b6c-5c3ab8f54e24",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27a38afb-7fc3-5d86-9afc-33befe40204e",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb8254c6-6a36-573d-be59-0517221d9335",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36ac6642-a415-5192-b2d7-81f4aea95a86",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:217a7f4d-3f1b-58be-b09b-c084e41baf07",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.1"
    }
  ]
}