{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:057040ac-3edc-504e-8188-8751def336aa", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9", "type": "library", "group": "org.springframework", "name": "spring-expression", "version": "6.1.20-tuxcare.9", "purl": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:e9b0f4dc-16e6-5950-9771-e89460d982b8", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.9 of org.springframework:spring-expression. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8da02a7a-b96d-534c-b3c1-d97e9b9676d8", "id": "CVE-2025-41234", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:73492031-e5c7-56ad-9a2f-e075854e72d5", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:50ff1fe5-a572-5de3-b2ee-55688c75fe15", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:6aaa6781-37eb-52b3-9cf2-a8a44e9ca816", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f10b8371-acb1-50cb-b7f3-0a7339989e23", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0dfadefa-9d7c-53ef-ae89-98aa94f2b1bc", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:dee657c0-a88a-5012-8873-322dfd353d60", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:dbfee4e3-5a67-57e6-afef-4972666caf4c", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:cf1f3982-d0cf-5e72-bd05-bebabe05ee30", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f2b5af7f-0082-5bc5-95a1-be3c345f3ea2", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:c2725bc4-b2e7-5a9b-9e20-0fd31cfb428f", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:72eff890-df20-5902-a5db-bdeae4549365", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:837f21de-c2ad-525b-a277-fa7c4e15228c", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e0c729a6-c99a-5108-b0a0-c7b6d92bb909", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b6695651-1b71-5c3f-b04e-cc68cca39e5e", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ee54db8e-6171-56d8-8bc5-d6a2501de7b8", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1057eeca-7f50-5ee2-93c8-45cbbd866dcc", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:855dca74-f074-558d-85f3-1d61f67da57a", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:8a5784c7-c089-566a-837c-37e0adbf2fb4", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:e6e83148-ae78-53c9-a249-5da9df523f6f", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:24a474ea-f92a-5f8a-b4a5-3ce2ac818b8a", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:195f603b-bea0-597b-baba-ad15206657ce", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1e858c66-9ba2-5f5b-8582-77b5b061e7f7", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f5f302f6-c028-5e98-9cb8-7bdee4c10b0e", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:f878c7bf-1572-5de1-b948-22fd47a3483e", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:1fdf9561-290c-5907-95ff-20564ca5627e", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:20cdfc86-35a1-5821-9593-5e45fb9f6191", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:347b0283-7d65-56e0-b4cd-3a6861091d4a", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:40dd52f7-f5d9-5cf9-9525-03c7d5b1356f", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2c740cac-2456-5ac5-831e-bb2bfd2a9b2e", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:690fa7e3-98bd-50d7-83ad-bf3805185d11", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:bbdb20a3-41c5-52c9-9c17-2030a977ae47", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:189a3a3c-fc8c-5826-9cf3-dc9d7ede23ef", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:d55e1141-02e3-5c73-acf1-8736ff280fe6", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:ce317960-ca5d-57d2-8784-a6938e414ae7", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:2cfc9565-4f19-50d2-91b8-c98a868aad01", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:b08496f9-64eb-59d5-8d0c-0ed7f215739e", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:0005b602-4ab5-5d25-a337-542bd74b7894", "id": "CVE-2026-59313", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59313 affects version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }, { "bom-ref": "urn:uuid:794703a2-ce1c-5c90-afe1-880f99bdc971", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.9 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.9" } ] }