{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:95913e6d-ed29-5834-a27f-38e31b9f8f79", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10", "type": "library", "group": "org.springframework", "name": "spring-expression", "version": "6.1.20-tuxcare.10", "purl": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:d87bf93d-2e30-5904-afce-8309af4aeee0", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.10 of org.springframework:spring-expression. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0548ab3c-520c-58ff-9359-a3a8a5c4bbb2", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e9ac66ef-bae9-5f0e-9d33-8f39fcf49f81", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:c77c4469-8b48-5d2d-ae22-14fe02f9d99f", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:de63b5cb-b678-5186-9e58-af4e4f623db8", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:547ed708-c856-57a3-b902-e4c085d1d6a1", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:52fe7031-0071-587a-9403-6067be503f91", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a8066b1c-71d8-57bc-85b8-3199e1ce39b1", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:3faeb16d-c98f-5011-888e-697a4188f0b2", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:6eb0f4cc-a565-5b09-b5c9-f3492cc74fbe", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a59083f4-7eb9-5c3a-ac01-cfff521370c8", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:407a3ca1-5f27-516c-b8e9-e5d575551c6f", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0315b241-a80f-5d24-b013-c56316107169", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4ec11871-3701-58ff-a58e-f3c8033b97d6", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:04fd665d-3733-591e-b232-c86bf9296cc6", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:509c7a11-dadf-5c76-90df-a48015075be5", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e62dfff5-9a88-5969-8107-bf3fb671d011", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a5c7f215-4a55-5bf4-b5bb-ec7a3a7def4d", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9dd8f32e-c845-51f4-a048-955d1ea173f2", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7c339945-85fa-5444-a57e-9ee51d21811b", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ee6f5acc-cdfe-501c-b723-8d912fef357c", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:245eb1fc-09c0-54f3-b4a8-62a7a7d002c4", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:9e9e17e9-d519-5154-9af2-2a00f822b101", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:e7723758-0255-5b0d-a47a-aafcd95c559e", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4ea48911-7f39-51fb-8f3b-330b1a4f0743", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:477824f7-2de1-5f89-b770-49ec9e139c53", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:4d84141c-18d2-588f-8108-03aed1e4cdff", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:55fd5a12-4624-558a-8276-37c31b221732", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:762a265f-8518-5206-90f6-5a065f377c9f", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:43ad8223-f1fc-5ae9-8c35-34a58f6d1ed5", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:5128a3d0-2c77-5bfe-899e-ae4ffee640f4", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:d58b8178-291a-5375-af89-bbfb438aafc1", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:95755fe8-8a8c-5aa7-bf9a-e7e697eaf9b6", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:ff5ce363-fe1a-58d2-80c3-132f3c59759e", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:0a21966b-8d10-5eb9-8c7a-f8ff82c6d7d0", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:95c714c7-b2da-5f4f-a055-da3d21b0d0b6", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:a3bb22c9-feec-5934-9400-6f2fcb20702b", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:7e8acc29-92a5-5c82-a124-6d72b199bbaa", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:bd4ccc9a-ed39-5ba9-85df-3783044c66ae", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }, { "bom-ref": "urn:uuid:8ecfb1c8-d761-5a6c-b57c-427c75989082", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.10 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.10" } ] }