{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:5d6de297-c590-5f81-b871-0841988611c8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6", "version": "6.2.1-tuxcare.6", "pedigree": { "ancestors": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.2.1", "type": "library", "group": "org.springframework", "version": "6.2.1" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8fe754a3-efdf-55d4-8713-04d891d3bc7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:49158b4b-d4d5-5a98-bf36-282914e597ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7306b5a5-01b7-59a1-ac08-ef9b616d2f30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:29d04835-2e60-546e-bfa7-d7c506b5d865", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e5e0ee93-f606-59e5-91f5-9267b189a2d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4326fc1b-e6bf-5ae4-b6bc-29475199ca81", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:6354d686-9f04-50bf-9b89-dc859803a75c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:64c3e565-2d9e-53c8-b897-00bd9a23b38e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:bf36d854-c352-5c50-b847-364f2429aa3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:0b50156e-3586-5dfa-b376-e06286333a17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:fea8175b-d061-5766-8b94-443f4d49afa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:10d15298-b4f7-5e6a-a8f4-db5e11e1c2af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:717898ef-a772-52f3-bdc5-00268d6a748d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1c52d0f0-54b3-5927-b689-490b2cb230eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8764a152-46c1-5868-9cbf-70ed31899f5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:8af5e2bd-2263-529b-b7a3-75e864efe35b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:a0d43d99-aeca-5423-8323-190810cecf8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:72d19ad7-b326-53c6-b9fd-cfed1987bf64", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e97127f3-c9fd-51f5-9b4d-08c832175751", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7de2871e-58da-5325-98b6-6e5e6f03229b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d48ac021-530c-5fa0-a4a0-5e3ef15eed62", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:72bae174-1b20-592b-8800-f022d10ce4b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:b57810fb-21a7-5126-8f84-cf052f04e3eb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:66446c3a-4f24-5622-97d1-34071a0b0a05", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:134c8eb8-eb33-5cf6-85a0-517567476083", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1e4eb103-afcb-59bc-b754-ffcd4a0f3751", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:d57c57da-8912-5e4a-b01a-32641598a057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3610cef0-f4b5-55f5-81d0-71b7b570381e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:2ab1e4d1-7f59-586e-93ee-550eeb54d4f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:9add7e3c-c702-51cc-b7c1-ff2edbea35c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:c7bf280e-fa61-53fc-8595-8d775e410e79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3c229ea0-ce08-5e37-9e2f-bfbb2ea13e32", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1a12daba-b7af-5b5b-8d25-5f9e70f78761", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:ee2b6821-db33-5a46-b2af-a16b5961b905", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:e6f9b3ed-ff16-5ff3-9c3f-e2b5fcbba984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:1aec3e52-866a-526c-838e-f90a206084b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:3bdba370-4963-5b1b-ac83-c66c4913ace5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:a4406313-7374-5d16-9aa8-d9008934cdf1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:69f9f718-c2a8-5618-b6e3-029f8e63b907", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:7242c24d-dd6c-5e44-aa06-d03863d6afc5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:38edd830-117e-5c83-a05f-825207c93984", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:cee6abf4-d931-56ae-b30d-76ac21122169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ], "bom-ref": "urn:uuid:4fc80fae-bfa4-5c72-b2f5-aea974cede36", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.1-tuxcare.6 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.6" } ] }