{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:76e68cfa-5e03-5439-871b-1a0dd2f7557c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.21-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2055299f-42a0-5ab7-833d-21ab1886fffe",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.10 of org.springframework:spring-expression. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fffcbb9d-d488-52aa-97e2-76ac38264298",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b28c183-a286-5efa-b165-0f0d6e33b573",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4ca2723-65c1-530a-9332-78c5fb23fa05",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3763d7f0-d784-5138-b628-b183f69f7838",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11554a05-3354-513b-96c5-4a1a8e924b1b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eaa5f18-493c-5567-8ddc-853c1ee7c4b4",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f5ec1b-8a40-5e78-b248-b0ded85c4795",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac619e99-5f6e-5ff1-b1a3-1509cf33d930",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7658a5d4-a458-5bbd-9c3c-7aab8bbc6e75",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:144f83cb-9c8b-5f4f-8154-c7621fcc658a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:031c3245-beb0-57b9-bbe8-4742ac3ea247",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8858a50e-93c5-5a02-9882-1ad868274133",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58c26bff-f88e-5a06-b7fa-198ceb1fa407",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e4fc104-8968-568f-8c4f-e0d3d033bc84",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14492063-b858-5e03-b4a1-fc6065d51093",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99cc888e-3014-55ba-befa-627f4e40b25e",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36226a53-3d3d-5c28-95a6-05d527b0690b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e91e7dad-9e5a-51b4-81fb-d0e0089bcff7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219cdf35-2da0-5ccf-abb8-bd733e3efa48",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bea9cae-7080-53e3-83b1-beadcfc1ac72",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01b836e8-6790-5190-8a70-a6257890083b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a0fc35d-e6d5-5255-a53d-524308462bc5",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdfdef53-634f-5b6c-8873-16a967ba84b8",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e101de67-108a-518f-ba40-f24077680128",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a02535e2-46b5-5d75-abfa-49a992e9cc8e",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b882b0a6-d7c9-5ee7-b686-bf92c6a86a7e",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d80b62d6-bffc-5a21-9793-201a0292c1ae",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f31b6cdf-da3a-5ba7-993b-5a991fb16715",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bd269de-bc6e-5734-996a-a94eb37519ff",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efd6d4e7-afe2-568e-b982-7325587050d7",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe13477d-832d-52ed-bcc3-ba182c3c2375",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:091bb638-e0fe-5c76-842f-0d2dfb1801ff",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6173444-a157-5178-b9de-0ea11d978761",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d1a685d-9319-5a07-807b-db36874eea34",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37687b4f-1975-52d1-b850-c4d26c14e9db",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fab3c7e-8d05-5b15-ad80-c42992c152a6",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc7976c3-c18e-583b-bbcf-c876389d6151",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e42fe6ac-4a8d-53b4-8b69-b4bb2af15360",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
    }
  ]
}