{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2f1db426-73ec-546b-8d62-2b1355d88645",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.2.1-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7559fdb1-3eb8-5957-9b5b-6a1a9287d94a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e76a06d-9247-57b6-8eb7-0914bcf0cb53",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7733a477-6ddc-5094-a72f-0a74b0e18cec",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e1e079a-059a-57de-adf1-63063205c520",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e671744-bcb0-5ea3-8d98-26d210c942a3",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3454840-6482-5762-8c29-f42a6b2e315f",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:329e9581-1f02-5dd4-8ede-862b6d196414",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e583baa-5b07-5fa8-a178-9863577e5730",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d53eafaa-18e0-521c-8dfd-dc6c272084fd",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a744886-69a2-536b-a259-6be325fa22ce",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c1bb456-aa0b-5e6e-985b-fe9991a0bc37",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf2e7046-d8de-53c0-86bc-26cd94e3c26b",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e3dfd98-aa37-578b-8672-ae89ac18c294",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29a6c2e3-bbc4-5d1e-bce1-0fd1d4ec959d",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6cdd76e-a13a-55b0-885c-4db5f4f1932f",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4381d78-c1bb-513a-a35d-4d0d7b69812f",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3d12866-2f25-53b6-831c-59c49607cf03",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52e22d09-3a4a-5269-872d-c25aed345dd6",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5038b6e-46d5-5772-bac0-fa7d84773c32",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea8301b0-bcca-5c09-9810-0989a4c768cb",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c82b865a-bfd0-5f81-89d9-dc15b51a4149",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:148e42ab-5559-507f-a254-567baf7a4764",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f40ef650-fab9-56b3-82a0-cef15cdcc2e0",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eb04d4f-119f-5ef8-93f1-bb9a9a3250fa",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58dd0b7a-03b9-5f4c-9658-9709e685b4f2",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:613dc721-ee0e-51a9-91b5-da79639f19d7",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2401dd3d-61d0-5bae-96ba-bcdc416138e3",
      "id": "CVE-2026-47883",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8852786-8ad6-562f-b064-3518101ef87b",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69b9f3f1-46fa-5a07-ac18-2228789ac868",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23870a5c-a5cc-539b-8100-4b53960aee1e",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e382f9bb-87d4-553a-bdeb-9dfc20506d0f",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0af6fcd3-aaa4-55ec-9fc9-795b34db0be4",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dbd6655-8ef7-5c8f-a8bc-0949c1746e83",
      "id": "CVE-2026-47889",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbae609a-79c4-5991-9fd0-5c3b15853676",
      "id": "CVE-2026-47890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66b1901f-095f-522f-9698-6d3edb12d9fe",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d38fee0d-3e48-5feb-ad41-b181ed7ed902",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e45d6ffd-9002-50ad-adad-2aca611a944a",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22730903-8c28-5dcc-99fd-b169289603b9",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f688a6ed-c15b-5924-b984-fc85e75e10d0",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97a3623a-aeba-5574-8057-7432dec0e8e8",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8994ef26-d2b0-5bd6-9e75-82ec767609ad",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97f37c3e-9f52-5d88-a221-50eefa0784b3",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0183a58a-c008-532f-8670-d2e54e638d59",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.4"
    }
  ]
}