{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:d10613de-6a8f-5bc6-b4f1-b5ab8ec617c9", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11", "type": "library", "group": "org.springframework", "name": "spring-expression", "version": "6.1.21-tuxcare.11", "purl": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1bc733ce-fd5e-5ec8-9ed1-a366f6417080", "id": "CVE-2025-22233", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.11 of org.springframework:spring-expression. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:35c6e8c3-02db-5782-978e-c9c645af0428", "id": "CVE-2025-41242", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2383bbcc-6ff4-5ec4-a431-13e7a8bf3064", "id": "CVE-2025-41249", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:78b6a22a-d371-5df2-a890-75e497a9df0f", "id": "CVE-2025-41254", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4932f6c5-84a2-5085-88da-bdebb0715a1b", "id": "CVE-2026-22735", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3391ad5f-cf15-561d-a2ea-4f5e3876be6b", "id": "CVE-2026-22737", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:77992462-8db5-543e-accf-a4326531938a", "id": "CVE-2026-22740", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:18339df2-ec00-5801-bf05-60338d9cd4a3", "id": "CVE-2026-22741", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6a150eb5-2ca7-5792-91ce-68c2bcf78c8c", "id": "CVE-2026-22745", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f93ee37c-13f5-5edc-bb8e-baa9c04b47cb", "id": "CVE-2026-41838", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:aa7321b7-338b-5dfc-9b62-424b3f2a4c92", "id": "CVE-2026-41839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3a9ca520-6898-50ba-9d99-f45824893c7f", "id": "CVE-2026-41840", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:fbec0c6c-0764-569e-bbc1-51bd06179243", "id": "CVE-2026-41841", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0b1c174b-93a6-5346-805c-24f320cc05d6", "id": "CVE-2026-41842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:255ac7ff-1f42-5bd9-8610-24273c1fc90a", "id": "CVE-2026-41843", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8ca436ab-9501-52a7-82ca-b0550a807b51", "id": "CVE-2026-41844", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2e39ce3a-363a-5d6f-b7b9-35d37fa90bca", "id": "CVE-2026-41845", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:d64e7a5a-a884-5ffb-9c09-b343059629b7", "id": "CVE-2026-41846", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cd959894-8058-5293-b661-cf9e282e1591", "id": "CVE-2026-41848", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2a6de267-62bf-5d07-a136-718675b3f491", "id": "CVE-2026-41850", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:a361246e-000f-500b-9bed-30301cd4779c", "id": "CVE-2026-41851", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f625d3aa-8453-5bda-8c74-7682c0e82f19", "id": "CVE-2026-41852", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:17bd3e00-5125-5316-9f87-12cd755f0ab9", "id": "CVE-2026-41853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f56a2e2c-7839-58f4-82c6-6d3294ae896d", "id": "CVE-2026-41854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3193f983-e563-5b41-b39d-af4e6a23f168", "id": "CVE-2026-41855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7a67e6f5-99d3-5b02-833a-bb2a4d39cd57", "id": "CVE-2026-47884", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3f4806b7-64b8-5cf0-bcd0-7731bcdb4092", "id": "CVE-2026-47885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0580c53c-d9d7-56e8-bb12-cbf927b5b099", "id": "CVE-2026-47886", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c0cf3b20-f209-516c-9e60-4aefc2a3c849", "id": "CVE-2026-47887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:37c1b3d0-f9f6-5885-9e40-c92b54483f2d", "id": "CVE-2026-47888", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-47888 affects version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4d60f968-409e-5abb-8254-ac0f1268e226", "id": "CVE-2026-47891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3c9a53cb-e594-509b-a91d-1e21aaaa29a9", "id": "CVE-2026-47892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:bc5571b8-7678-56c1-8474-93ea1afbcab5", "id": "CVE-2026-47893", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6c624e6b-ad2a-5e2b-8687-c2887c97ce54", "id": "CVE-2026-59280", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:6421ec75-1d0e-5797-91d8-c9e08722711d", "id": "CVE-2026-59281", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2e49737e-803f-5d29-bf14-4bfd1591e25c", "id": "CVE-2026-59282", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2c69f3b4-f83e-57e8-a9d7-e9bc20071999", "id": "CVE-2026-59283", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:f5af20e5-0b64-58a6-b3c3-1158e201bbb6", "id": "CVE-2026-59313", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7aa0d421-3bbf-5237-9850-daf86f64b577", "id": "CVE-2026-59314", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.21-tuxcare.11 of org.springframework:spring-expression." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.11" } ] }