{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:23109859-3397-53cf-b008-d5495836b23d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.13-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:19c57241-7b9d-5881-abdc-fd7054c6902c",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2897a350-3c8c-53c7-b940-ffd3ed27f3ee",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:748fb919-d44e-56cf-a246-bccd03030a12",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a9c62b6-1310-51bc-817c-a3c6df01f619",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39ce2ea4-9ff2-515b-92e6-204daf3cd164",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47205945-9f50-561e-b7d3-74e2be52780a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcb161f3-3e30-59f6-ae05-6db22263151b",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc9b5d24-58a4-5836-bffe-188647f5adee",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaeea307-ec9e-5aef-9769-6fdf0b53bf03",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8be4f14-6221-50cf-9aee-f13330f98765",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b622e55a-000e-5dae-b80e-541ec172d321",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7da7196-4420-58f2-b8ee-9f198c83a11e",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22745 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80ac793f-4a3c-573d-a5b6-df807c98cd11",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72964c86-a15f-5fbf-88d5-aeb5a8ec8b01",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dee6a18-185a-5f78-9988-f21d3a879e5e",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:493f3602-5be6-5fb1-8bf9-877d29a9289a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b0beaff-c156-5bf6-9c00-fc4b4e2e25a3",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a531276-f671-58b9-a68e-8992115f1ca6",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1cd3b946-60b0-5f24-b76a-0aa10fafab7d",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eec0497-1cbb-5ba9-9e57-e6c12d67f36c",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b17cd2ba-6284-5e51-8147-ec7656f95ced",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4556912e-9c1b-597e-9639-a91602777d93",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1f863e6-1f66-5bfc-a2c9-7858a3560b9e",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c345e27b-ea16-551d-85f4-1cefa70fca27",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f5abfa1-b7a9-57c4-8edd-6f7c6b00281b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e30c65d-676b-5acf-9e2e-b0d3fb2b185a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7118f12d-896f-5ec8-98ea-cb6dcf5cb5a6",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f1f8d5e-0b29-5926-b9ad-4950ae5abf53",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b75f49f-c707-5bf6-ab87-61b241503137",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec0c0dcc-fa31-53ba-bf6a-7a2991380124",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38602287-e2c6-5e3e-b50b-d18a86d5f1ab",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b3c44fd1-9c25-5e66-8eef-3ad7442a7b91",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1a744f9-7078-5f5e-9c9d-360b283501f7",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f10cade-6a89-595c-bfe9-aafeb37ceb78",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bad614c-2d7d-58b7-bbb2-250d6a64422c",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55859bec-1911-5200-b536-c370a6ab2a07",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:549e872c-df2c-55ee-9d36-2daec731d287",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da11668b-bb05-573c-8eb3-8ca6e4dae4d7",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:055168e8-ce88-5f47-a4ab-3391e72f4325",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac8de164-c8ea-51e9-8c79-fe3b3a14a36f",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9118a7cc-ad11-5863-899a-eec09e8bbfaf",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37080d32-463c-5710-9ae9-cbf66641e259",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.13-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.1"
    }
  ]
}