{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:39643f9d-64fd-570e-8cb9-683ec4356a72",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.16-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:00c92602-0367-5579-991b-e399405ecb6e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a22e563-682f-5d8c-a44c-15a3e32207ba",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f86615b-a8ce-5f5a-bfe3-2039c70ca047",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50dc5cb5-32d4-519e-99d6-573247144fda",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b657653e-0d27-5ba7-85bf-fdccf13c3e5e",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dffd06fa-afe8-541b-a3b0-8f7545ceabbe",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bff47ac3-6b32-51bf-bc4e-fe4649ae80be",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a23df5d-343f-5ce1-b91c-669697487535",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dade0ac1-7356-5077-a848-fa30a9ab582b",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0881e5ec-2b64-5de4-be33-b7a508b5b959",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1eb2c63b-06a3-5a15-a903-9194a989ed1c",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a90cac9-4dac-5297-9a5f-a93b9c5a99dd",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3309fab2-401d-5270-b801-967ced98194d",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6f13745-f480-5a35-af43-3a362c5cb707",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25d6f08c-455d-562a-8f53-809a32770567",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8d25d37-9734-5a2c-9c7f-604d003670c7",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c2b780e-28b2-5680-9b90-bd9c4a398245",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89b4349a-5192-506d-9aa1-ca2de200732b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd9fd11d-c3a4-5e83-919b-5f492f30d386",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b625aa2a-d811-5b8d-b928-82c57142cd1d",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:662bf18e-4874-533b-8f39-bd231311e0d7",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd9b1e52-210b-5247-bb83-66ae28b0f806",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89aae698-3fce-51f9-a22c-a699e0d040cb",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f797fd7-8b70-5b35-a7ac-41db89c0d634",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5760e0bd-a5fa-5449-81d3-da03995d9bcf",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f7a67fa-3924-55b6-985d-db77b63ef569",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc504eeb-09d0-5aa1-94ff-432d24e1d5a4",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f58bf2cd-6884-54c2-bd7d-094a9d256012",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:245d13ee-d5f3-5190-a27a-e1109208e079",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b34a012-b22f-5f00-a014-ed7769f1aeb1",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae786223-2b5b-59f4-aa54-0384d9056c0f",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7534d92-9d79-5f9d-8283-4827088e084e",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:964bd54a-4215-5481-baa1-cdfaf3436456",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8ad25d8-cd33-5beb-9f34-3ffa6403d605",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f429b0ca-9d99-5886-841e-17ce2c90afbe",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d7dc530-3755-5a31-847d-27f2aa102e06",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:949bc36b-284f-5817-9795-d5ee2f12f72b",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4fef472-7185-5a1b-b9f8-d582eaef8be6",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b95829f-e44c-5cc4-a3af-5b9df6d040d0",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d00144f7-213d-5e54-8fde-354559abb100",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.3"
    }
  ]
}