{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a50aee13-ac21-5517-9345-cf369474fdc0",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1",
      "version": "6.2.12-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@6.2.12",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.12"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:526fb360-f994-5c6a-a66b-18cfd8f9bd81",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7f87176e-4e71-52b4-9bbb-acea1ad81b28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:78e2db8f-cf4a-5812-8fa8-e49a7ff89177",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:63c33245-5656-583d-a28b-de712f8f2790",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:defc5067-038f-5008-840d-caed400535f1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1a6ea0d9-b768-54da-a14b-b166b00f68f9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4b0bd18c-a0a5-5bad-95ba-b44ccbd4bdfa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f456f661-d4b0-5674-b199-b8cc717cb35a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f3cd31c3-ee9e-5af4-be75-ea9e98005d48",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e2d653ea-569c-5aee-a23e-cfa65b8777a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d5b6794a-7339-5d02-a422-40e071f2b1a9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f3d74002-8734-5f15-922a-5c92484abee0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:99476973-df8e-51af-8b46-cb44a3826815",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f5eb3572-5afd-5dbe-832a-6076719356c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0d371047-cff2-5306-a4a0-41003a9fd6ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e7f0da77-30a4-5842-8fb0-d9338331351b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a5072fd8-14f4-555a-a21e-fb79ca50af22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:06bdbd81-6852-50b5-8bba-e3800313eae1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:69e64830-7c99-56fe-a2ed-a8a70fdcd062",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:86bcda90-66aa-5c98-85df-d02742972bec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b996fb2-b5f8-57e8-afb8-9f81aba297c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec367ef7-259e-591c-b007-ea015cbe512c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e4c04884-20f9-5354-9ef1-17ab8a3ee0d7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7a91d4d7-f555-5baa-8c8e-9840c294f650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6ed3f758-f3a1-5805-a065-63423907fd69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:22a7f6e2-67f3-5c65-acc8-e0cde85a4a67",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.12-tuxcare.1 of org.springframework:spring-expression, and is fixed in 6.2.12-tuxcare.2."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a2e45f73-9677-506f-b98d-1b34c6fcdb40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a55dd298-c4e9-5afa-ba2a-6c0f45a7018f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cc8e76a5-5c9d-548d-91ae-9a2548888689",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.12-tuxcare.1 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.1"
    }
  ]
}