{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bfcaf6b8-dff3-59f7-b6cb-682c7e7c2a11",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.2.1-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:92c25b24-93f5-5038-83ce-9ad0a105589a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2294806e-44f8-533a-8003-152f7e053c68",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:028bec98-f192-5b9d-b04a-36b592051148",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e8472af-92f1-504c-8c60-a3becce3cb6a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73ba1490-6bb2-5b6a-801a-fbdb0b5eceab",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c92af5b-72e5-5b06-854c-b06f577f279b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47fc718e-ecbc-59fe-aaee-8084bf44b418",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5171a14-7504-5d26-ad5b-43bdc84b2ec7",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c559356-a680-551c-8180-407fee9da29c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83207071-113b-503f-8e55-e483f9db2996",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b083314-41c6-52ff-ab47-794152648724",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7165aa9b-1e30-51ae-bd93-45486f3a0654",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfa61fc6-7c4e-5d5a-97ba-fd93cd6b6ed0",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58626146-6caa-5278-b270-2fd07dc820d8",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14054fc6-a471-5f54-8823-372dca641e28",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d2e9314-7c86-554d-8ee6-5c1a6f61242b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6851a538-c5a7-54cf-a6d7-400685c4e6ad",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc7d9dc3-1cac-5402-8afa-2b101fabdc2a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fb27127-c48e-50cd-bd0a-85ef787a5f67",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3142bd24-2a8b-52dd-9919-01a3f334a5fe",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c184307-defd-589d-8cd0-d942d907f3f8",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d082c45-691a-57c0-a340-4da0383583e7",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f54a418e-bcf8-5f6c-b78b-cd537d9856b6",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b1c0df9-93f2-5ef7-8ad0-755848467bdd",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af9e3e91-6c13-5b07-977c-33c7000f02bd",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:616f1ee2-497c-5b41-b05b-d5c12086517e",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a09b2aac-1504-5fdc-84f5-933ca054f4dc",
      "id": "CVE-2026-47883",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47883 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0f3abf2-be17-5be9-8ec1-2a33a3468e86",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4f45e61-2868-534e-bcf9-63e626a73d85",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53bc0f84-b74f-5593-aef3-449c7fce859c",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70cb17db-a89c-52e1-a0e2-b5aad7b63ef7",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1935d2e-e3d2-576d-bf73-44710f284c08",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a4ad15d-df2c-56d0-a680-59c5bb4046cc",
      "id": "CVE-2026-47889",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47889 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22d80462-5f52-595a-9d17-0cd453b747bd",
      "id": "CVE-2026-47890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e980cb4-a274-5fc4-99bd-1e4bf978d092",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15b96d4f-7075-5c57-91ce-22adce4b366d",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3dc3b73-6d6f-5566-ba1b-2650dda916b9",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c72d9b45-dce5-5809-a9f7-44fb69d81475",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21d75b2d-6a5c-5d1d-90fe-dfcf9cd2c3ba",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97638838-02aa-550d-96f0-4b2c3fc46113",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fa0590e-e49f-583b-b6aa-e328b6d79b8e",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:825648de-fe43-5b79-a1b6-22de93f499ce",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6b39cfc-6a53-59b6-ba4c-ce375ff69886",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
    }
  ]
}