{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e864c33d-6ae3-5c6d-9015-bc38141d1b1b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.16-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1a6bfd99-d452-566e-bcd2-37d63f34842d",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6abd3fc0-96dc-56f0-809d-c8ba18e13cb1",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cf369eb-40fd-5ff7-a85c-0045559c3280",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:969a6f6c-e168-5a0f-bb0e-8e6a7cb76156",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2b5da56-294f-5475-9c3b-bf1e3254c9b7",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2712f10-6650-59e8-9322-5235cacb2cbf",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cd79c0b-621f-5e76-ad88-5e9334cb2c8a",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b899acf-bf26-5024-8034-838cdc8f95c2",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10bed2f6-e6b2-55f0-a6a6-e0016782d453",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da69ab6b-055d-5da4-8b2b-c2d71a5e9c09",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b861c56-e2f6-53c4-8705-2aff3c79bfc2",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5205432-ad9d-583c-aa71-c9d2c14249a8",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f475bb4a-3a6a-5405-9154-632dccd28f6b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b6aa03b-d64d-5b58-bfe4-dc54665bd184",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d43dece-8b4e-52b0-a296-5ce83671db0a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ec82e67-8384-5f0a-9c7a-45b07fc805fe",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfda73cc-ec60-5df4-bf19-5a3d05b9b230",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a413a0-b991-5b87-966a-7a3f346aa667",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e7e2b8a-5789-518d-8080-972076a4b418",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:732666d2-17a8-593b-a874-346f422de432",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78a21e9d-d9ba-5794-98d2-a2113df16a3e",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe38cf88-93cb-5032-8384-b443c2731615",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3173090-84b8-5ce5-bf42-4c2767659b5a",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0c2f352-786b-50a3-8591-d71a89b3a07a",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e71a97b-9e3f-5fb4-b02e-9d0d531ac16c",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba50cb56-793d-5a79-81eb-548eb3c7b5c6",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa524a1d-a2a0-5997-9bd8-3f2d17274192",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75248758-5cfb-5739-aeb2-912457f92de9",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:232f6d31-cd60-59aa-88c6-aa67f5db3753",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:239d5e07-982a-5f54-b666-65a823a13aca",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5d77505-db7e-574e-8312-bc2edb8bb6b0",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ae9bb45-0a61-5478-aec8-e765102da5fc",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e73e6665-caa7-5be3-915a-55af3a89dec7",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57cfa7dc-32ad-5414-b7b6-d64e5d7bfa47",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62661583-18ab-579e-9945-898850a90a3a",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19bc5d7f-410f-500a-b23f-4c0b7d15d1de",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be19ef76-b1d4-54dd-8492-aa0bc7500c20",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4287b661-eaa6-51e9-83d2-47d36f083a24",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d7d788d-d396-5dc3-8408-9ba8593b0e3e",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f7b1945-c011-5de2-ab9a-1e75746f515d",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b78409b-ace3-5f51-8c95-29be4bf5441a",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1122c6e-03ef-5c54-8b7b-2aa4fc1fca3c",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0384b905-47d6-5b5a-8733-fbb92780d329",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e67bcfb9-50d5-5f06-9c11-3cf07bc89446",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:575535a6-58a7-53fd-97b7-3051fa18b721",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df07af2e-24eb-51ca-8f94-f09fdaabd6a6",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.8"
    }
  ]
}