{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:0df1384f-d557-5e70-8ad7-85ef1587da06",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.16-tuxcare.6",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7e3acda6-62d0-514d-9c2e-7e8ac8ae69ce",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37588f18-a39c-5498-a3db-5e698f86b12a",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d36e647f-8f44-5bdc-a7d3-64184f0c9976",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54f30cef-7db6-5703-83e9-df932f6144e4",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7d37cf4-34ec-50fa-8be7-0df4e8c19868",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:096946b4-b75e-563a-86c2-91950d0bf091",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17a280db-b1b7-5c84-a143-639067effc12",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1aa999e-99c6-5fb7-beea-d1fe1526cc50",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66842ba4-4fed-544c-ad56-8114f181bd5b",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37d8f2a9-01d9-5c04-960b-b2236bb77394",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d875d11-0f6b-5c15-8223-8fd7058376b7",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4092d103-552e-5085-90a0-25e35c3bf52d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ff6f725-6f02-5b6d-adce-a7632a68f76c",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84a700ae-8cae-5af7-a8f5-7aa4c2fb2883",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c49e9e-e8f2-5244-8f49-ce92dc021c5a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa4a6e10-92af-54f5-8dd4-17c55fe5b7e9",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b67417a2-a49d-5da1-88a9-babb46f4c8f8",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91120794-8de8-567d-8411-2d717ebf31d0",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff707c78-799a-59c2-8c4f-497b657a2009",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0562af4-e870-5e50-8859-329298f72f27",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:659118fc-b6e3-5c63-9e28-71890bc4e847",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce44564a-f367-5f78-ad4b-eef9fc7383d8",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00df6545-fe86-5a49-b615-0bcfafdb3339",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2abaab74-52ad-507d-b640-632798c0d0a5",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e6c112a-c380-52d2-a094-e16fc396173a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b90fff1-2e12-53ce-aaf7-f671eff2410e",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31818bc5-a319-59db-a9e2-2d78f2242d53",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:158bf57d-308f-59c7-b569-d6bf467d46b9",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fce0200e-43ee-5dd8-a0c0-4bed28566356",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bba8228-7fb9-5e8d-b5e1-3ee766b09816",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebc8804c-82ed-5122-92e8-9aba257aa968",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a36608fa-fd1d-5f23-b1fe-22211235a506",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5043fa6a-421e-52b2-8731-d14b2ed49b4f",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73f3242f-aaa8-50e8-a7bf-bb14a447cb10",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b102d590-c10a-595c-88fa-147b17f3d31f",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b22c6bd-f1aa-5e9b-8648-88d6a7d65d74",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3522a8fc-2b36-59de-9f2a-6872c2345636",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ed65ca-4b26-5661-bfee-ab7f21b11555",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d855817-888c-52b7-a8cd-553625db590b",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:128e6185-5771-50b7-bfd2-82b5a8941f75",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fee27f18-5ee9-5cfd-82ee-9c7894ef97bc",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64c13ee3-01ef-5622-b330-94998127c882",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:947d07e5-11e6-590e-baf5-8453803570ae",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d661ea2-d12e-5f65-93da-3aca842b9924",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22f4e732-9dbf-5dcf-b165-ebbce999462c",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:530dd3e3-2265-5b4b-945e-c3c4cde877dd",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.6 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.6"
    }
  ]
}