{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c53a0ad2-8346-52ca-b9f4-e992164b987b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.16-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a6d0e3b6-4864-5d81-ac85-e400b0d1fc3e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a25cbb75-fbdd-57d2-994b-78e01d384f66",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bad7568-abd7-5d10-90a6-4551b5a07296",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca2b1e2-f622-5994-a184-95bf5dada96e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ad82a41-3bd8-53dc-84c1-43951a64d376",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fee3e133-fc5b-52ab-a387-50919d9e30f3",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e44ef12a-b57c-539f-ab37-029489e0d53a",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa50df57-f28b-52e7-bd7a-f85b232afd3f",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a7e12b2-49e8-5a9e-b39c-2d322fd6e0b7",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19a57a82-c743-5e76-9679-6f5bd57935a8",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:033c2471-75a3-5c4e-b267-812ab2206e43",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66a074b4-7040-5fb6-921d-674d5bc3775c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de230aca-b38b-5b54-b825-eb8dea4a601b",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:365b2ed2-c6ff-5d01-97cd-8bb9dcfad0f0",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb637a5b-761d-5253-a510-4567125740d7",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e81672d-d6db-5a56-b0fd-579de93e3f17",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65df4670-af8e-5b1f-b97a-f1d474d01adf",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6018e2d-0b26-5b56-ac75-6927684d0ce9",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e21a9080-2a9d-5d56-8fb1-d53f8e77fd3a",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2be36568-e5f0-5b73-b28f-c54d4b92c21c",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4aeafc31-edf5-5148-a975-146dfc9e4ec9",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38eaff91-228c-501c-8407-cbb2de8861a8",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e7e96af-45b3-5940-b26c-5780b9ff4b06",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:965d7423-ce24-59ec-9f21-fe061aa25ff6",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cebd949-8a67-535a-ab78-c90b449d9391",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53f7f9e0-2d02-5865-b71b-4e9fbd37b499",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b342ba08-5bf4-5850-a853-cfd8a8477afd",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a304c658-9d55-59a8-bd67-ad5325ae7ced",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4341651e-1aa8-5c06-b00f-f5f868a1eacd",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:755909f2-4575-59ae-99d6-8515665bb25c",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93c0b882-3f97-51d3-9f1e-71dce58ee8d7",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00e8aa62-38fa-56ce-9eee-5aa0cd3dc14c",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73834d6f-20e9-5347-909b-ba6ee427002f",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39632105-6f69-53e3-a40d-e609a1183c5a",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4888706-89b0-52b7-82ac-cccba45b0a37",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:889bd9e7-e7c4-5878-b4a6-aa48b38e8287",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eff015c9-e688-5653-b963-8e9c60e06621",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a93f91a0-20a2-55db-a5bb-33faa6ecab2b",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:246d5b4f-2882-5934-ad42-1bd757bac483",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c075351f-3482-58d6-9630-a6b170e93023",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.4"
    }
  ]
}