{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:16b801cd-68f5-5956-b479-507fff1a2543",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.13-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9d48c1a3-154b-5150-873e-d144dac71114",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82e38a1b-b7b8-561d-a7cd-ff82967c4e49",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c39ea720-0bee-5965-8294-22facb57daf7",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f474c092-b6c5-5e77-8c0b-7e9d8f443010",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d89fd3c9-8be7-5d10-8878-4a40ff7df380",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a89990c2-bb72-5a9b-ab35-982c61693a0c",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f873e7c-41a1-50c6-8534-2674cebc572b",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1075bac3-66c0-5de9-b1d5-269d1fc4953f",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:603107a4-a1b2-541c-ae52-c61d04004d7c",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8df52f26-20e1-50f8-b378-906c7385a63a",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:afe64707-216b-5052-b119-00aa5459db85",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42437c76-473e-5585-980a-2aaa8d39036e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2eeb320-97c9-58bd-b339-a18b6e85febb",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a50053ee-7845-52bb-9fb3-4800b9d9ddaa",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26b6ca2a-b56c-5477-9568-2a4103bf84e9",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9387b69-b8e7-5a3b-934a-cb5bd2264bda",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b40a592-feb0-52b2-b7dd-06125a6266ec",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a6a98f1-c076-554f-8ab1-6d485d8036f0",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ab7bc85-7ffd-5e93-becf-c24fce1a8f81",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e1ecac6-1654-5ce4-926d-2c6c05c828f0",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05ed566a-53c0-5c36-af72-b93f221d66a1",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bd762f7-df3c-56af-b380-407d7e2140b4",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45546fb7-9c29-5246-b5ed-24473e4c8e62",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b08a8c8-db95-556b-97c5-0c7a59b0de82",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c05c002-5d31-5378-9933-12949006b31b",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb682139-cff7-59ca-81ff-ded7c9353394",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16b9a154-ef74-58b5-891d-0b794f0702ec",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:803718c8-ecac-5344-8825-499c34f59d5e",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9beee1f-645c-5fbc-901d-a81b35c39330",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff4cf582-7dce-5549-8db0-8178beb8cfb8",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3678c1d7-e2ec-5a42-926e-e349e7dc547d",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffdffde7-3ee2-5225-91b8-6cf54a7e59dc",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b770624f-0e44-5e32-9f4e-9ad461bb614b",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:749891a7-8d8d-5295-b60f-d11b1cd00f00",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaf861d9-e18f-51f3-8b99-8a1e68939ee3",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5155e294-e8ac-5062-a713-f08a77d3bf18",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbdb0880-505a-552a-b675-c3cd82043cfb",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:764d6f9d-d7bf-515c-bf21-0be543ebcabe",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a179f244-ed4a-5fea-94a9-44042c1788fe",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21181c76-54a2-5b6a-93f2-01e6ce318c9d",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:536a3713-1872-522d-9b81-6268b9328b58",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88f813d9-ec0c-5675-a70d-d05fc48ac8b1",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:774399b0-38e6-5562-b552-a60f7f49cf2a",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c522dd53-cf70-5b37-a54b-7d7da7d7fed6",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:749d0aa8-a95d-5e66-97d7-56adbe5a9ab5",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3acbdac-d64e-5985-8c71-52193cb61877",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24ebfb39-d918-5afc-b27c-0f46ce79e4eb",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.1"
    }
  ]
}