{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:df1f0896-185e-5aeb-a5d5-18c1a50713ca", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12", "type": "library", "group": "org.springframework", "name": "spring-expression", "version": "6.1.21-tuxcare.12", "purl": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:82febceb-5fc5-59dc-b364-590295df803f", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.12 of org.springframework:spring-expression. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:387dabf0-6b94-5a72-9884-5d17631fb5bc", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:61786f84-5a0e-5579-9845-c7cbaf9f112a", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7334c07a-0d03-58ba-861a-2f0736a58937", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5541660d-6013-5af0-a865-69e01083ab34", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:61f1ff2e-0e3e-5ccf-b8e7-8249534fa158", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:02ae09f6-ae49-59c9-b41c-110f6741bb9a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:05aeecbd-c4f5-5d96-bd0b-7d4e52bb89eb", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:ac20ce65-122e-5d0b-b7f6-6e41dc0f5910", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:994a2236-1dbc-5d00-8f34-7d3c4b55eefb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:659eeb89-eb39-5661-8507-1b5fae194e45", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:abdda5ed-6dee-5e80-ba1d-d3c4c7d95ab5", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:1621ddfd-1abb-526c-a593-a1b5c63f45d2", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3e08d428-a6a4-5426-b726-808faf841f60", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:b2e95dae-758c-5d38-9104-afdcf43a5f5e", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0444d9de-de36-54b7-926f-df454526c09a", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:c2e9f964-960f-5fbf-8b6b-df71fc696541", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7ac1b687-d66c-5dd4-bed5-5e52da35c6fe", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3de8bc36-9470-53a0-a176-80917c6d2027", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5e5a8739-8d49-576e-ad36-dab450a30e98", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:7c24c22e-5faf-59fe-bc25-d9ae59b7a063", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:bd244abe-687b-50c3-83aa-9b242f97818c", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:2073e95c-bb45-5e7d-a57f-b727d0d52fa1", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:775c5ee0-3285-5266-8222-2013a3785ca8", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:a26f0998-ef1d-5e42-a4b0-ab1e3a3aa04e", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:8953ae75-3d65-5d1a-bcb2-26b301897485", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:cbb537e8-5593-5163-8130-fd2efad348e3", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:0c73301b-9b43-5656-a3f1-7944b1e82ae6", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:5d0e8dbf-29b5-5a3f-a73f-e32c32bba99f", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:3b531a58-5b64-5db0-bc6c-22db4014b48d", "id": "CVE-2026-47888", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:6826b5ac-80b7-550d-9ad6-d41247d9db09", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:043b4143-2cad-508d-80f1-fb3b4a1eedbf", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:fe5e531a-ee96-5df5-9ac3-8b306b25e8c0", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:433e61f9-4c0f-5c42-acf3-14420a06d50b", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:75be2ffb-3d6b-507e-a9e0-013143a92604", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:9e4cbc0e-5447-554a-a6d3-00e1f2bdba00", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:74d45aad-8379-5974-bd2b-5a8073673f83", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:71d6f1bc-959a-5f17-8ed6-17a58559dfcb", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }, { "bom-ref": "urn:uuid:728dc743-c424-5818-9834-fa52cc02bd49", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.12 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.12" } ] }