{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:162c4b22-b0fe-5cb3-b749-44dc482104b9",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.13-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:af68ece8-ec4e-5fb1-a2ad-45efa6008cc4",
      "id": "CVE-2023-34053",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4602219-7100-5691-b939-b66bcd809118",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fc6b0ae-4706-56ae-911c-af3c11b16e18",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8304b9bc-e93e-5017-867f-d30aec6cfb9d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb08b000-2350-5933-88f7-9c5901742714",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b560d9f-0bd6-5045-90a9-46a8173c4d25",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e3626bc-87ed-53e7-8c2f-49514faf3545",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4fb4a06-8648-51ec-ab61-0296ebe8235a",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36c7d495-2ccf-5040-ae9f-aa14fff69a51",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb16193a-a192-54df-9829-63ef91d69e99",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cce37249-1705-5283-bf30-a6137adcae1b",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a83f39c-2050-5ba8-a7b6-e5c2059e99a2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aea3c3fb-43f2-54db-b151-bb144580998d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d69c73c-b45a-533c-bbd1-fe67c8eb9798",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8762cd2-542e-54e1-8f31-8979caefcd6b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64f3e27f-713b-56d8-8695-d2a3e2f19cff",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aade129f-71a1-5e17-bd98-7378449b24a0",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f12947c-7cb3-5977-9076-a956a9155216",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2934759-e3ec-53bb-8747-173959774fa3",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56f688c4-3add-5bbe-a946-ee20225befb4",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb746266-fc4c-5126-99e6-2187a2da3991",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8ecc068-8c08-503c-be5b-b5fb69e0ca8e",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88e921ce-b4c2-541d-a5d6-c22b4fe0046c",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8f790cd-23e1-5280-8db6-8d396e1d5df0",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e289178a-6bfa-53ff-8e24-9178c565fe02",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2242422f-77ba-5040-a309-7fb3a5a4a7fa",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85a050a1-8300-5171-9093-eece8aa52a61",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8d9e256-2b02-56ac-82a5-7f7be28d01a6",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9677a52a-151e-5199-92e4-7e88d6397b21",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ad73dd7-e359-5712-a1e7-6494a7bb2c19",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37ab1ea6-543d-5289-9f6f-4fe04def43e0",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80635ca5-4027-5f2b-8d61-3c657eb98928",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25427b89-2c11-5f60-b667-93974fa6faec",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7dc45ba-15fd-578d-a046-f181bc6295e5",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b5840d5-d116-5930-becf-d8417ee22709",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e2ccb55-1a61-5128-813e-697a95be08a2",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3457346a-c297-572a-8d6e-330736b1f207",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df388ac8-1a7a-5d89-aa0a-f5850437909b",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e99893d2-3d0c-5a53-b6bf-2e47350ded3f",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfde7a38-7f31-54ec-808f-ae6bf21982cb",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9fae295-709e-56c2-8c24-911cbca28c73",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90cc09c5-483c-5da1-8bd3-3707a5da380b",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fbe43dc-bd31-5b62-bdbb-9dae75e789cf",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd2de016-4d97-5aa9-a2b8-0b5116abd33c",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f025fe77-4ed9-5b9c-a9ee-570bf5491903",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6780060c-6fcf-5b63-8030-3828aa1cda39",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81030376-26b2-5dd0-beec-f9ff943058a2",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.13-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.13-tuxcare.3"
    }
  ]
}