{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:06c77bb8-8dcb-5ce6-8375-7e5d9eec01b8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.7-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7229356a-cea8-5ada-9d39-95cf1eaa5f4f",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:345b9594-f40a-5f5b-ab82-5c967b6ae083",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dd2f2ec-c47f-55fc-b381-e83dfab98635",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e34c263f-1a44-599c-94f7-d03b9307dc6a",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40e5558e-bff7-5134-98af-07c97b276909",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1c745d2-6fdc-52b9-bbc3-40866e1ce052",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc22e7bd-9be3-579f-8923-34b94d33d5bd",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc21c750-b1e3-5c77-a253-d5de71b69620",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd2b49e9-0dae-57ec-87f7-c98dc471506b",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d93ad48-7a1d-5e65-9c47-03564b79399e",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3b3c59b-b87a-5090-8f99-2304af08800f",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d35fed2e-71df-5018-b63f-bc95d978077e",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9fe2378-7b75-5023-987e-5b1fcea95904",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcbc64d0-17fa-594c-adde-5559f90ef0ce",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e747008-0048-5c03-a7c7-0534f78f3494",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:853e3603-b39f-57be-9ee5-7e4f118f3b37",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26e89ea6-c1d8-5676-91af-3826cc48c7fb",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:968f452b-c4fc-5c5c-9d7c-7679c544754a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f6dbfeb-14a5-5af8-a346-fed137a66dc4",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ae8b60f-6ec3-5892-827f-21705766a90f",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:375fc215-0e84-5c7f-8c25-c97bb92ff207",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b891a25e-c157-525b-b4d7-419be88f103b",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8a5e4e8-a9c3-59cc-b9be-3efb52536a06",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da346da9-d1d8-5a1f-96d2-444f8d8767db",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b66a2a6-5d2a-5ed9-92e4-2feecee5030d",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94dc0d0c-ca29-552c-bc3f-0552eb43169b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90a1bded-3949-5cc7-b7c2-d8295c254e06",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:014fe7af-fc5b-5fb3-ad4b-cff4e0b84b01",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4e80816-81dd-5813-9201-3c28a76d08bd",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d74d9be-b001-547a-b917-d9d1aade9091",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8bbdfaf-c8b0-5b62-b791-dfed7319d1ce",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3d5bb4a-cbc1-5714-af9a-0db751deeabb",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0352531-d2f8-5ed3-92bd-2af1cb36771b",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00ab086d-5db3-5dfc-98f7-45919a2685cc",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5317708-b888-5e81-821d-bda9621b0f0c",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7bf5eaf-e20b-594d-a54e-1d97186236d7",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4f66417-6a60-5749-807c-fa139d3dff49",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a9ee136-0633-575b-adde-076e8c9d046c",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6daa551d-1225-5b5a-986c-882dc30e5ad3",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc01c56-600d-5b51-a8bc-7fc9ebd9a273",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb0ae8c5-aa47-574f-9763-2155fcbe10b2",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ff62acf-bc3d-5732-b91e-60cc18784435",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:215f53ea-ce99-5793-aaab-b7b338f98b11",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51ed3103-b90a-506c-9513-b89832870f51",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.4"
    }
  ]
}