{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:97ce4e6c-435d-5d0d-94dd-4c28fc6a134e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.16-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9d697550-8da9-5580-8c21-3a94eff708ed",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc972a46-8d40-58a2-9f13-3f20620a03ce",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5cebd01-7586-5699-be37-40530bc8088d",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0edb17e-d4da-57ea-9dda-5ecf57236b0d",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:413b952f-bcca-5c0a-97f9-1206206094a1",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40700c8d-a1e4-503c-b60d-d25ff1a5d5c2",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dff9e5a3-1406-5749-8c87-63f524a02e0e",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a738fcef-7849-5dc2-a7ea-bab644183283",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:431d3b16-271e-5e54-a0af-83683e7386be",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83064d9e-1d07-569e-b3cb-a785bd25f770",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99e649fa-4bd7-54e1-9cf9-f001059fc401",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48a2674c-9c3d-5b4f-9d7f-364539d7556c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c29ad1c0-59aa-5b45-85cf-95053d890fc0",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ecf919e-9957-5305-a5a0-e923bd51d90f",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:430c5d14-f2a3-5785-a478-e239752e0562",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0ad3b8a-0e34-5f3f-9311-7bc600500b1a",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8fcaebd2-31db-5087-a05d-f5ad46e66256",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41844 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bbfdbde-9a93-5dbe-ad23-32bd0e76c7d4",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62a7af84-b67a-5458-a635-e423530cf24b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c15233a-e0ef-5f22-9105-f284d8aa7096",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7e712da-a726-5af6-86a7-3c0534c6f624",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c2bda4b-4557-5026-9e9b-975faf454511",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb2fe926-c968-5f08-afdc-0ef2bdcba2ce",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2beb8605-dafc-5370-8d5b-e68c3a69543e",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f95c2b80-5f33-5bbe-97c0-9f4fb8dd1fe9",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49eb1192-8a63-5ebd-ad2c-41e3b49e60d3",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0db52476-3894-5eda-9c17-cfb651e1d388",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:affb379a-6d60-5f17-a350-ad4cf542b58a",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a62097f-3564-56fa-809c-74984b8188e3",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f0722ec-e92a-513d-ae43-28cc6e364885",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05b9bd56-05bb-5541-a11d-8e54435753c1",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe9ab000-f424-5064-92df-a70400e8e328",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b501e63-47e1-5f96-bb4c-4d40bb9d8a07",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffa6461e-f92f-5dda-a8ac-33055ab09a04",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b14589e9-49fb-5d94-969b-65cacf6883b7",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4692f2e-9aa9-56fc-849d-5597a3cc57bd",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ef1d11d-756b-5bbf-ad1b-f56cbc77029e",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f07d8567-9828-58a1-99c9-dc1e6730a1ea",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6042d42d-d226-56d2-9a9e-da2bedfc9735",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7466881-1c84-56be-94c8-9a2a94660a6d",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.16-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.2"
    }
  ]
}