{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:abb0834f-ec00-58d5-bd4a-907f71c5ad3e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.29-tuxcare.8",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3b0619a8-001b-5726-bf86-34fd6f50b0fe",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a133b063-6314-5320-b883-7bcbfff3c295",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:945d8715-112f-5731-bc88-b1b514a88c2d",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0affaa7b-80be-5ccb-97fb-000cad185b68",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a521b0be-7534-5dab-a839-01c772113983",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d0e6100-ee34-5a6f-886b-a94ba7993c7c",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc6215b8-23ee-5ba9-9225-f5488768f7ee",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4670b359-1db1-505c-8313-cdd28f28e5bb",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43d6a00c-2db6-58f2-8119-1936c86d58d2",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac6de71e-d913-59b9-978f-6593f7b7df4c",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:164e42e1-fb81-5370-9308-e52ff793ddda",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20816dc3-c5ca-57a8-8b5f-64d1db0ee248",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-41234 is a false positive for org.springframework:spring-expression 5.3.29-tuxcare.8."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b68c000-5a1d-5820-97db-eb1c02785abc",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94b4b908-8b42-5d2f-8239-89d4cefb4fbb",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a73de32e-5bf3-5204-b4cd-05745951e399",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe0a2830-0066-54fb-ac3a-43b7d36a3489",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:144046f8-33fd-5fcb-b7b9-4322808e6add",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a48190c3-e699-51a7-8232-6f8ba44d5042",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed30db81-aa43-571a-94b7-90d40bcb9729",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cb75cd8-4be7-5fb0-85a7-9e26ee4dd2b5",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a7e296d-6057-5f02-a40e-72116ffc2dea",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e6ee032-cc88-59d4-85c8-f7ef053bdc42",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6df0cf91-f1dc-5259-8f50-b1d1a77355fe",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.29-tuxcare.8 of org.springframework:spring-expression. already_fixed \u2014 The target repository (Spring Framework 5.3.29-tuxcare.4) already contains the complete fix for CVE-2026-41840. The fix was applied on 2026-05-19 as part of a TuxCare backport for CVE-2026-22740 (commit bc0026ae70c), which addresses the same multipart request DoS vulnerability with identical code changes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59d0c66e-4fc5-5776-a308-0e3b48057f33",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:058bc891-5059-575a-b444-8a6c9c32baee",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2feba311-48b1-5d1a-a254-c70410cd91c2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce2c5d13-c1d9-5227-a62d-c65b98d4f3c4",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12f89b4b-2d5e-543f-b476-1309339a67c6",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a151d88-73ac-557b-ac88-f0686ba3c944",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93c72ce9-4d51-5fee-ae1d-508a9728cfc8",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41847 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89283b79-30c8-5149-8e20-c29cf9149105",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86862854-24f6-508f-b22b-7311c7367f56",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:298b8e3a-ca64-5342-aae1-42d081cd4f57",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a2942f4-3195-5862-aa18-1dddd2d23002",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3572e8e4-826f-5059-a288-dda01856b24c",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72bc6234-0548-52d5-a599-136e6e1765b0",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b2dfcf7-bdf9-5202-a18c-163483320e14",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:855cacf9-b835-52e5-b3c6-7de4796b1a4d",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a9b9b6-4e80-5230-bc99-5648cc7181b5",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4c26006-44ed-535a-b8d9-0f19111a227c",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa7e58ad-f260-537a-9e73-6ab8089bfe88",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40947fd6-8700-53c8-9de2-58b088b6c0a0",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbaad721-d0c0-5b6c-89f8-ef256aaab00f",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1cee4f0-33a6-5866-925f-fe8787259682",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b36164a-04b4-51e4-919a-29757ab36eee",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10372ff9-435e-5653-9d15-3a1b3d2f6804",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da01d457-0171-5111-9e87-86a42f6ab633",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7ef46a7-38b8-51c7-b870-86129c270dae",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d3ae251-9e92-5e2e-8a30-8ec021911f7f",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdfb6569-9839-5c31-be3b-e2e9a50447aa",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29ca6d64-c659-5b3a-bb5b-4b5d51e85493",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 5.3.29-tuxcare.8 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.29-tuxcare.8"
    }
  ]
}