{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:10a7fd91-6d10-5cc7-98c8-1e34e766aba2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.11-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:02fa2d45-6874-5eae-a9c1-c8dc64b79698",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e6e039e-e857-55ba-ab29-7f862e7a4200",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e2b2dda-a79c-55de-9786-6a5b6d8d2421",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6690a8ce-82fa-5f95-bcbd-b10376d0ee6b",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58aee28d-5291-5596-bf3b-7bd57b0a87ce",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65c3c44c-9fee-53b1-9127-0c15964168bb",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4faba89d-9398-5f75-9f51-ffae4168a9f5",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac4da241-368e-5e9e-b504-ac27228274b4",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de4259f5-037a-5ace-bbb8-b428d13bac70",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:886cda19-c87a-502e-863b-532fc857ff8e",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:493d0edd-3c2c-5f0d-9519-86906c83d723",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0027d0f4-36b4-5ee0-b17c-49ff7443d80f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd635698-5e87-5ad1-8951-9c8720db0ab0",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a75e1b93-8bd0-5975-9b30-b32d9a369024",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:167f37f6-07a2-5232-a9e6-230ecade01b9",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15a3a1a5-ffc6-5589-9742-f7520f643d89",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4aa58ac4-be65-5618-8efb-4a358e7c9255",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5182372-1e60-57cd-b724-bbf966f1996d",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e9554bf-be5c-575a-bab3-d41cb84d1ab7",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad10753b-ef98-50ba-84ac-6e00902adc2b",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1755869-8861-56e7-89f2-bf9ac93fcf31",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bea40c2d-deb1-5212-89b6-ff757a4564f0",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b239ca3-a0d2-5fd4-a946-ad3070410bad",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31897fbc-9c72-502c-86f4-75e5ebd0ef49",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea065da0-d464-5a3f-afab-eefd9748ae22",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53d8fda7-59a0-5dd5-8490-89d6ef5547f2",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77e9ca2e-94d9-5262-bfb6-e74901403dc5",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f80231f-dccc-58e1-aa36-8833be3e95d6",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cc38842-147b-55f1-b9fa-451f67ea0dcd",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20317178-0041-5435-96db-7740706ea1fc",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24ff3fda-372e-5bc0-b605-fc756748076e",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:990567a6-2c7f-5194-9fff-97260106a796",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40b2d241-46d8-5340-8e9b-b29769ab676d",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:570a008f-f642-5267-adef-95bfcd217205",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:413db30f-4bbe-5f74-99da-027fc2fd9b86",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a29b1479-19f3-5d06-8648-ab7e27582d98",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:322be6d7-92ea-5a26-9075-a6e43a107181",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f03ecde4-0ef3-527e-9f88-79c86d70b1f8",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8e1d7a5-1c61-5c04-8738-46e1cb3dc781",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:558a1d73-4990-5f6b-b58e-8cb430b85e6d",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3acb1625-5d2a-5454-b802-f6ce4d09b3d1",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c35b5036-590c-5204-9918-ce8046e4f920",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f126dc31-273b-5020-819d-7f82e2b08c82",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86c8dbb6-3c0f-5380-ae0e-a6edbc1b07d5",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7deff22-eb4c-5541-908f-531133ee217e",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96fc557b-f719-5237-96b8-f353025500c8",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9076f338-ec7f-5a0c-85f4-c52ab1735eaa",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.4"
    }
  ]
}