{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:973db891-1906-5e1b-83ec-600ea0f38bc8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.2.1-tuxcare.3",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8877822f-8646-5eff-bb84-9304065b223c",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8441f94-c967-52ba-8967-5f73563f5f44",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28a135e7-6a95-52f2-8dc3-c3396a5701ef",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10b4b05e-b2fe-5ddb-8780-bd4fd3070fef",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35630c21-c14a-595c-b173-cf3a6be244cd",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1325b9ed-cf27-5acc-a64d-5899d436b616",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e238a80-ca47-5340-ac89-ad00b2277050",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bfbc1a66-fd18-5f93-ad0e-1835cae73471",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d5bc8a9-8383-51a4-b43e-8bcee421d532",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b12eeeaf-36b1-54c9-9f11-62e33cbc386b",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2205e329-3c9a-5163-a4d8-6a992eb7dd06",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6776e02f-bf99-5886-a49d-e53c413e6438",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdac765d-66fd-5484-bb6a-350e1fb77182",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea47dcb7-f44b-56ae-ae60-ed6fd1c10368",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7d5612b-9182-53ae-8c39-0ab0f08f75e9",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23ab0c08-5aea-589e-bb69-8339acd25509",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2df694ee-445c-5c2a-bcda-453de3cb9f3e",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c08a45c-5c90-54da-82bf-6dfc90cbe706",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d264bcab-e302-53ef-a02e-64da1f41fbb7",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3604a782-0a5e-5ae5-bff5-39c5eb338cbc",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e6eb422-36e9-515d-9b17-99de0af85403",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb5fa160-ece1-51ea-a2d1-bbd17552ab66",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1115406e-b1da-5919-a210-88b4734bae62",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bdb94ef-b7bc-5f27-8939-d65aeab6b91a",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88758887-74c7-5cad-bb28-7576081996e8",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7156e4a-139f-5f08-a5dd-0c1b33d3a768",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:652b904e-f904-58ca-96e5-465206928bae",
      "id": "CVE-2026-47883",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47883 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:083e3a20-dd29-5fae-9373-0251c69e163d",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:088a4d63-eb2e-5252-b9b3-0e45af818b34",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaf7daf5-642c-5036-871c-4f59166c0375",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:378dbdc7-b1ed-59d5-a4ed-fe447dd9e0ea",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38df7756-be7a-5bd1-a7e6-aa630b6a277e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71f8067b-1007-589e-8970-13287713b3c6",
      "id": "CVE-2026-47889",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47889 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed91cc44-5611-518e-90c7-03d7992c8862",
      "id": "CVE-2026-47890",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47890 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff6d9f8f-2835-54e7-8f66-31846ad8db11",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7878bbf-0ebc-5f45-b628-59f1316b7452",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:658af97b-05cb-5024-9474-2ffc503af2d3",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0021082-4007-541c-b3d7-435b9f97dd22",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:820dc27e-76a4-5fdb-b36b-2e4d8f308caf",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c2ad519-ab59-557d-a0cb-746a62fab282",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c62e6c4c-65c7-5e65-9c1e-ffb24fa9acc2",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8e2ac74-95e6-50d8-99c8-9a711b305892",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b1de0c1-867d-5392-b33e-29f0fa046c03",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.2.1-tuxcare.3 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.3"
    }
  ]
}