{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:73771957-6b6b-5ca0-9cac-b9dead52b3e3",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.2.1-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a7722960-1b93-58d3-84f6-7180fb1e4e5a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f759f492-f04e-5ca7-af6c-d1f855f06266",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1f77442-ca9f-5385-9f0a-21978dd8bda5",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd2b53e5-23d9-5729-901d-ec6491cf385f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9711da98-b621-50e5-b25f-ac2d0606975b",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54297194-4e7e-5b05-8b4f-c243ce370102",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fed7ea9-2b09-5211-a997-f6f0bc687a74",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b06c56ce-db8a-5084-8255-f53d393821c3",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8484d50f-ab33-566c-84c9-b3f4e5bcc44f",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef152cfb-d543-5f8f-8de3-ba5ac2a8fb47",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c32c2861-e586-57c6-aed8-d34978bcb1aa",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3be2e483-b46a-5a18-88e9-e6c133d969bc",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b105fa39-e45b-53fd-9dcb-af39a6f50990",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8ddfacd-1f16-5413-a365-90de351409e4",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:281d0426-6559-56ed-bc28-7048c602d9d2",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83d46e52-cbcf-5844-ad05-cfe8cca48176",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ced4b16-d385-59e8-8fe7-0fc114217935",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbe6b85e-220d-5df8-804d-1049226a72cd",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d974f4ed-3aa3-5bc4-989b-8e29c4132d15",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9713f72-a2d2-5b49-868f-137b43f6d2f9",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ab3c6a9-8bb9-53ac-8789-1f51789ca4c3",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:703b3ee6-621c-567e-8d1a-19a48586602b",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a6f0e89-aaef-5de2-9c0e-c07826db5bb3",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:963155b3-b41c-531d-8ecb-076add9945cc",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b72b7b6-819e-57c1-b6a3-0a767c2fcf8f",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8915e10-4428-5035-8033-268d0a78b131",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a218528-275a-5595-b651-4558803cbbd2",
      "id": "CVE-2026-47883",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47883 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42688599-8aea-556d-8dda-a6e1f81621aa",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d01e61c6-d554-57f9-b95e-95e351d0e3f2",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:104d816e-ffa6-52af-abbf-da56e027c26f",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69866d79-f413-5a5f-880f-427700692d3b",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecb0f034-2650-5831-a55c-3b21b13f82b0",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4706c3bc-e5f2-551d-abd6-79f78dd9ab04",
      "id": "CVE-2026-47889",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47889 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57f65c3a-3763-53f6-a8d7-e151a84ff297",
      "id": "CVE-2026-47890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8685805b-b15c-599c-9cb2-f6cb7cdf25f0",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af901d1c-cc42-5fcd-868f-fc32e58f0b2f",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6ae9051-913d-5cf0-8ab5-582b9c82ebd8",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4c98da2-7e3b-54ca-a532-f20c6d3ccfaa",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa82f819-bbfb-5fa4-90f3-35dc2238e4d1",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c301ba8b-4e41-51a6-bae6-3ecec2651bf6",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c860db0-2116-5ce5-beed-4c9a6deb9308",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:080dd02d-5523-557d-add9-934fe2f6c4e0",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b378882d-c5b6-5d5e-a131-fcdf9e49ae65",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.2.1-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.2"
    }
  ]
}