{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:19a89841-e681-5c60-94c0-8df7d900f7b3",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3",
      "version": "6.2.3-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@6.2.3",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2009-1190",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ee4fdb45-a5af-5f6b-832d-e070b9d4f07c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-1190 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2730",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:85df0391-484a-52ac-9065-459290203c23",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2730 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2011-2894",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7a2a5ce8-9286-56b2-a0c3-560c5408a305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2011-2894 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2014-3578",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a6a03221-5929-583b-a6e9-ab721c4a9309",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3578 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-0201",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:699fd26d-7228-5ebb-b873-1c80a00a4ef2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-0201 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2015-5211",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:213b659e-c0d4-574d-8b66-df5bca79b17f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5211 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2016-5007",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:32d3df36-3670-5a73-a3f8-b6b47ded2607",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5007 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-11040",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f15ecefc-9a47-5f0a-9077-c2d4261dd6e0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11040 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1199",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ede06821-1c22-5385-a94d-071f525c4b4f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1199 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1257",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7581feea-b67c-54d0-8793-468fb9fc46e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1257 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1258",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8921f6ed-a64c-5cd4-bc47-6817455eea3f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1258 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1271",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2e9ac85c-2c77-5040-a0b7-235b730ff73c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1271 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-1272",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:22f4073d-7257-578a-a19b-a4ae5e253c6f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1272 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2018-15756",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38920232-8d93-557a-800e-abd40d290ccd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-15756 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22060",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3f413e9f-f3f6-5363-8b74-70e97c0a9566",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22060 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2021-22096",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:38b15b69-ac48-5a9d-aa13-45d3083848ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22096 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b5674fae-f208-55a1-b20d-8c00618538b4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22950 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7783c6d2-2f8e-50a6-ae43-85baa8d59090",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20861 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:44507e37-5610-5283-b63c-b549c5b5555b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20863 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2c17df56-9aa3-51ec-a68e-84d7a4ae1857",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f8790857-0bb5-5e87-9a61-1a3d3f2c263e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38808 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:285713a5-e138-5b67-acc5-c605c3181b4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:21d3c41c-b7b0-54ec-9bab-6ebbf4079371",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f225e937-4408-57cb-a369-85c8a958fb59",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:27e56ebf-3772-5c44-b443-15181e49780b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0f3d98b1-e6bc-50d2-823a-c8aee331451b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:71c1ab85-1cf4-5123-bc20-3f7a91a589b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9c6ad72-513f-56e5-b385-1a24de15f219",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1fdce629-4310-56c9-9713-c297ff991c46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
    }
  ]
}