{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8ee8fa57-ce1a-515e-b740-7cb35bbd7432",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.13-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2fcbc397-26ae-5d31-b063-d0ada2be98d4",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cea2d60d-9fc4-5971-b567-1e2bfbf1437c",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38e7e8c5-2e10-5b79-86c6-351e8fe44d2c",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2793a854-af0e-58bc-9d25-0b4edfa6025d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fbb97df-0602-5250-aa4e-f07e2050a9b9",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:183be3f8-b006-5978-ae4e-5bdd3d6dfbb1",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20486c7c-3a8c-54d9-8480-4a43a893674a",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4d99c9d-8a79-5620-83f2-ca47110b0af5",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00a06568-e291-53af-be2d-09f63b24d5f3",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80bf4185-3585-5ffa-b5fa-ae89dc619889",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5fa81b1-e37e-5759-b26a-3201531a24b2",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4500ad4d-d59b-5a90-9c26-c0c829854d55",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61bd8da1-dcec-5106-8b2f-b1cc29b2d07b",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f9b8dc2-67db-531a-822c-422138dde5a2",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25b5c6cd-9e3e-545a-b40c-af7905a9623b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f645dea-fc90-5088-8dfc-5a6ff84142f4",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1355aed-06b0-5835-8192-82f1e210f85f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f10bbacb-aff6-55d1-8a5f-030dc5c7b48b",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c965e5c-7574-5e00-81d7-0534a63c8706",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5051eb76-d4c6-5fc3-bfea-5221899655b9",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b68a84f-8a4d-5e4c-91e2-bf99568a3497",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:014b5d04-9da8-5c3a-8033-3f9974557047",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3facb881-7171-573a-90e6-7bea76628d82",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c15acd3-2468-5711-aa3e-5cd3aaa7f72b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:466f3089-2685-503a-a6ab-9eb8008ce04c",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59220c81-470a-5708-9561-acdb493b8d52",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2635fb2b-6687-5531-b54e-2f3c404839b7",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44cc2c62-fec1-5d77-ad2a-5deca9df1127",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3113157-04e5-5849-b760-bc9e8c33caeb",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7715efca-0b3f-5af5-a75d-e67501aa65dd",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88a9108c-91a6-5ae1-97ac-311208fa4fdd",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4fcd5e6-ec79-53a4-ab80-ba84838e7df0",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f1fe96f-30d8-5244-86c9-4678436e6847",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e931bdd-805b-5add-9bca-dff515fa9f16",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59673e1f-ef88-5430-b47e-0bd08f5937b5",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ebbb065-a503-53a8-b8c7-bc6c5c1c91da",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47e1469c-dca1-5b01-8061-e2765bf1e9ce",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc6afc44-49b3-5f05-92b1-e2d7e7aaa21e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2be2a1cb-6110-5255-8067-0c9017f5f85f",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dae0c8ca-a182-50a2-bd14-1a27a2c33c56",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2802b825-185c-52a2-b520-591b3261bd63",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e473cd5c-46af-543d-b5f5-3368f7c2de5c",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a88c047d-fc40-5a73-86dc-8a0688491a0f",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22a2cbc1-ba6e-532d-8ff9-5bf7435516e9",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09502b52-7e83-5428-8a99-71b261aaefce",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:881d829a-e600-5ee9-8816-6a65e7ab8230",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abea53cd-d10c-5e13-9312-e93e039bbe56",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.2"
    }
  ]
}