{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a04d10c4-8519-5065-bdbd-e57ca5c3ec7a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.12-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:91775c54-8791-5da0-b89f-dcdaf6f971c5",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cbf65b1-51c1-5cb8-bb75-4b78b05e8e7f",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a925cec-c458-5218-b808-ea509aac454d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d328d143-46da-586a-91b5-78fece54ce9c",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fb7e116-5816-585a-9c95-6c3f585cfca6",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6d54972-bf57-59ad-84a9-1767a04a7dab",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77285422-133b-59fe-b4fa-230f8ff9ecb5",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d921d54f-f33c-5708-ae3a-be6d79ae5691",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcd4dad8-a028-5560-8b70-750ecfec59c0",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:857d23c5-e8e6-5a6e-8648-47e11ce00d86",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7d63fae-c8e7-512b-98fd-bb92cdae431d",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19297f9c-9ae6-514c-a939-4e38ba0317a9",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:734a3675-a137-5b59-abbc-465bd87f3881",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ac197b6-8919-517d-9825-3b5f46d247b5",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bfac737-6dc4-59f5-b170-4fb649390e2a",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6547e8ce-987f-5f9a-9bbe-9d12648b301c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:412c915e-02da-52ce-b9e6-9c3ebfc01360",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:087ef15c-a054-5f05-bf3d-723c603aafa2",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78008f44-7c74-586f-bba7-bff60d88f546",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24c3685a-f893-599a-97c8-bcf5869a7ced",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.3 of org.springframework:spring-expression. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeb2c36f-1f26-5ded-a214-f3c639e98e0c",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cff219e-1f84-5a1c-b4b0-50eb892d5ab4",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e310d355-e9aa-5097-a858-f530d4f06b67",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d011d2d4-c81e-5c5a-b3a8-c43706b8391d",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93cf5832-44d5-5549-b560-c8732253818c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9346a6fa-f7a0-5e2c-8545-e807ae6a0475",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a0c2a5e-e62f-52fa-9488-784c6050ac33",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:147c21ed-5329-55c4-8066-4318915770db",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68a4fbe7-7bed-5665-975d-39f509d25c29",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2f56f0f-a50c-516f-b5c3-922b2a9d8ae7",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18bbf2c8-846f-5636-981a-71c158b356e9",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6177134d-90d2-5c32-b4d1-dec8a1ab9974",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cb9ba83-a519-54de-9b46-ec6a52e378fd",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b34e355c-cc3d-5b22-b33b-1a59588b8446",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50a70601-a3d1-5b8f-bc4d-7b6f725612c2",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62cb03a2-26f8-58a5-854f-72301f2f452e",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8900a6fe-df2e-5090-8e8a-f103c2607d4f",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc8d9acb-9eea-5f14-be36-7d6ed83d5993",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb8e711f-d2a1-5a46-b679-7d95d215834d",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:833726f1-b6d4-5b2f-9b89-05893f0b4c4c",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c6f99b9-cda9-5622-b05f-38185c22e3d3",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:971ae50f-1795-5066-980c-6aeab30eb7ec",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cae4940-a471-53e3-8474-e2a9d63158e9",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39bd0134-fedd-5903-a78b-29d93ad7ad7e",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68334f75-850d-5037-8e30-5751084709aa",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca99662b-40d1-51a3-a690-cd4cafca61eb",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08470c66-2fed-5583-b051-783ae35aa969",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.3"
    }
  ]
}