{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:45b958a7-fc2a-5314-ab6c-b8b29d6e287d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.4-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8d63ad42-5a8f-5e25-a2d2-b0e9c9808e8c",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f275299e-ba6c-5fad-8e7d-0c73dba55ed1",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccbb7f2e-4fa1-5909-a3ca-a0a5ff549dd7",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bee0c75-103e-51ff-8f92-076ac32bbdda",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b761ffd-fe14-5baa-bdc2-2986a6ea7593",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4ccc6c6-11cd-5210-afb3-53a57ab4c4eb",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdd9282e-5be3-5e22-82f9-19d4e4415af5",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8d1ee4a-549c-5e96-93b9-065db8b7767c",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85e1666e-123a-534d-98e4-8e0b0ee0347f",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f7eaa37-75ad-50a2-b522-7de8b2efad8e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e221aaaa-fa3a-52c5-8a77-0861fcb315af",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e510c84c-24d3-59c9-afb7-1c8a3e45d31c",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:377ee50b-d649-59b5-a3dd-048cb6c4827a",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22b45f9a-446e-52dc-9382-c8a8a4109ca0",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f90b9f3-0c4c-5ce9-8eb2-c3a14f0dada0",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22741 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4b070f1-fe89-5750-9e96-2689c75b5202",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b847e85f-bd1d-5d3c-9225-4e33bb43843c",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e899c94-1605-5322-8a4a-a42565601fd5",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bd9984c-9762-573f-8569-c4791326c7d1",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3dd4a3f-197c-50ce-942d-32ca1ca4278d",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22bcd02a-2147-5cff-a8b8-1a065648db9a",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d87e2d8-b94f-55ac-b9dd-cdd365a16dc2",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0bc9a87-5025-57dd-9d94-be6ee38c72ff",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d882885-1bb3-5540-8af0-54b80efb48f4",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53b2e55d-8f7a-5399-b957-446ef2f48878",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f28dd3f5-9c20-518a-9d78-4b6d4b99adb7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74824ce4-1061-588d-ba7b-f133e0dcc211",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20c62b85-db08-5cd4-b926-5a96fe08227c",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a0d9f92-2612-5b1e-bac0-c254d3471972",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a8ebc85-ab85-5fd2-9a1f-86f6f6fe204a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8437aa2-2851-52b1-a098-318c982dd9a4",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:660bc0cb-554a-510a-b19b-5cb3f3fed2bc",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a39fc890-b876-5900-95d5-e632f90527d2",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36d2aee4-3aa8-56c5-a63b-634998d84c8f",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:083e9a0a-4627-59af-9b0f-a80a894e2e41",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c0fceb9-bda5-504b-978e-1fe63faa515b",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:474fd3fd-b4c7-5678-bc0c-59e70e2cdb5e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68117978-ff8c-56d5-9a6e-c221931656c8",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb243226-8c56-5f71-9943-87835853bf58",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a73044b7-f3bd-5043-8577-ccddc1db210e",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cecb1aac-da68-5563-9bf8-f5ffed0aab21",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d9c9780-f77f-59d4-b773-3c959d97452d",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45d6933d-964d-5bd8-b6fd-ba803c844217",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a9bd330-ae01-585d-a340-0cef08f5011e",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b59e1e7-6497-506f-abdd-b9579e5863d9",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd9d1e5a-3094-5b0a-ae7e-382a016650c2",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.4-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.1"
    }
  ]
}