{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5ec2fc53-b942-5a9f-96a5-1c392dea3fcb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.4-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:0b9b60da-74c7-5d4b-bf1a-9c3a08d7d7ef",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba7382f9-4c83-57d4-b518-90e92a0f005d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a45e911b-ab1d-5a73-b97b-6bd06df76971",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:331f6a0d-5c52-5499-8df1-c3d7e3b233b3",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fae2aea0-871c-5bf2-ad59-131cb215376a",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40c2107-8fcd-5404-ac60-9f2349427115",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7de4870-c080-5f28-96ed-795897879c05",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54a26d34-131a-58f0-ab37-ced9c316c75f",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5e517ed-c72c-593b-ab79-56c38f7e8017",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df3f7029-e2fa-5108-9029-8aec728820aa",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed06f548-2e51-5458-8f67-7058ac080a11",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae7a11fa-c717-5401-b303-ccbeca1308ec",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ceb5e553-ea37-5859-adf7-5ab2d9bc4a1a",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38c24f76-b42f-5c82-9662-1a585e10f335",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c755637-08cc-57e8-9af4-23bc3c8d40f8",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86223291-1bc5-5dc4-95b7-8a711f7f491c",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0390b19-2066-55af-8692-72e49d16077f",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50e10e0b-6d12-57ac-96d0-d81c8367a42f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52faf751-36fb-5a27-b7af-8b40f09b5830",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20bc4537-1c7e-583e-aa50-09918f491521",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99b0244b-158d-5696-94d8-688b7aa306ec",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c06fddd-fd68-5db0-a629-ff00df790f4c",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d681fd56-4906-5a37-8642-f98d655fb5e9",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26ab6b54-f995-5e7a-b9b5-cf9dd704f867",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df298bef-6762-57e5-848e-811a41b847f4",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9c34d94-d20f-5647-98e1-fea2e6d3b7f2",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4cc9898-79c5-5e1f-acc0-b39ed73c3e6b",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:449781b0-a62a-5fb7-9acf-950caea48125",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4784a6d8-db77-5945-a93a-21377dce7788",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2edba9f1-ac17-5afe-900f-018d5f5336cf",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47d9ec21-122b-5aea-92d0-16c8b29e9acd",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:347def9c-5c6f-56c3-a005-780481f89ee1",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96295a98-2f5b-53db-83fc-1c9a55811b4f",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e51e231c-5302-5c61-809e-b3a2648fceb4",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4d5a0e6-3201-5723-99b5-02dd14c6bd90",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f76e6528-8e2a-5ed5-9cce-36e99090230c",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a6a40da-b014-5a5f-8481-4a644e7b9ea3",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6101e53d-d68e-52f4-8c31-daba17beba72",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b12a5e96-a825-5e07-820b-464a08634e94",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b725903-ebed-5742-9619-83f0c09ff127",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:308048fb-14a8-5458-88af-ecb9a3689432",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00fc08be-bad4-5ee1-8f89-774374bd6777",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63d9834d-e437-52ce-ba04-994da86f29bf",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0210c2e3-8085-5d21-914b-8f4cc21ab1f3",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53ae7012-3ac3-5cc7-a681-bc30a4d2cc87",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7627914b-890e-51d3-8ecd-986e6c71e66d",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.4"
    }
  ]
}