{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:461fbb94-f5d4-5a25-992d-7886264a1cde",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.23-tuxcare.9",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:dc0e6270-8f80-5732-ac88-ac938f052ad8",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92d555bf-ea40-5c5a-a92e-8070e5899e87",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22e3a19b-a5d7-585b-9844-c57cb7ca3bc4",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:539fa99d-4b68-586e-b479-e6266604aef5",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28c0aa20-6bff-5f28-a0d7-43e475b732ce",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c61dae5e-e733-5bd7-bf4c-a5e69be76db3",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fae6e234-2f75-5477-b640-5ac09d9d1d8f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e8e139-1477-5e19-a546-0977433b25d3",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c689a83-4940-59ce-947c-74698443dd13",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7151a637-ef66-5ebb-92e6-12730fe71785",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:284c83b6-28fd-5efd-9b12-91fc177d5f77",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:993cf07c-ca14-51ec-8a04-46f5519d0ecb",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:beaf7bb7-3f97-51f5-85ab-b8d7ba79188d",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96252f6c-7277-5083-b567-03d4c8fd433f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec4a8c4f-0bb0-5def-805e-540cc6c7cd74",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9c4ed40-6f21-5a39-9056-f58290a309ce",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fc860d2-54af-5db2-b8e7-822b10879da3",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eba2e387-0dce-52a1-9d5e-7b1eee4e4954",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2291ec86-3660-586b-91ba-422fe96699a7",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70a1eedf-d909-52f2-8487-51344d2a2951",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:650f62be-2f39-54e7-b24c-9b9200299fb8",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4a4ac66-5a0b-5d0e-bd18-b3d81b19f693",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e31b64e8-86dc-5dca-98ab-e969454aa76c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ff1cb6c-f42b-5793-8ec4-3df25f9b78b0",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9de4bb24-3204-5aec-a264-aa17bd85c8b7",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51409aa7-64fe-5a18-bdac-85d2e7a625f9",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:352fd906-0b9a-5a87-afe4-f4d44be22141",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a33dc84c-ed4a-553e-856a-3c3bb8135d73",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:477a3684-a7ce-5f0a-8ad8-90bd3bd8d0e6",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c59a53a-c5a2-5df7-ab73-b1a83dea868d",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb94b66e-3122-5420-a0ee-af11c8f1773c",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee048945-5f4a-5c0f-a34d-737e1dba49dc",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43ad03bf-671a-5adc-b79b-b96e846a59cb",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3efd258a-d9c3-5d7f-8918-d7deb854f977",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ba619f8-82c4-5d31-a4a4-d993d0529fe7",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06ca24b1-e6ad-50d1-8bde-acaea5ebeae3",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae1fd9c8-3037-51b6-8bcd-d714c749c527",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5c3a693-c4a4-523c-a6fe-2da8c8a84f2c",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1e51f94-7e02-5ace-aee6-6c37cb9a3e8c",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bdc443e-4693-5b86-b076-c133f78683a4",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d54e632-4144-529d-a34f-de8ef0cc87cd",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b44d0a7-9cea-577a-a5de-0845cc85a03d",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.23-tuxcare.9 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.23-tuxcare.9"
    }
  ]
}