{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ac050380-693f-5b7f-9542-ee56d1d7b30b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2",
      "version": "6.2.12-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@6.2.12",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.12"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:24b59a98-54c5-51e3-a01f-90afc541af4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6cb08b0e-8c66-5c90-bd28-53cd3aec4e40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7a90f568-e7a2-567f-a3e6-03ac1f8df461",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c1f84fcf-3430-5bef-9714-0a75ab3d62fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6cba164c-5ff1-5200-8bd8-f4ad36b558db",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1297d878-1f48-51f8-b16a-56ecf86e2849",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5558f30c-8a8d-5414-bc95-3d9f09419397",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:612415bb-8a2a-5017-869f-61c002365d4e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6a45da24-2e04-542d-878b-36e2ab3b7dd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f90c9af0-6701-5b3a-ab59-f013bb630d6d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e7794adf-d48e-5aa1-a0a0-e09c0efab736",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2b4a295f-e860-5b7a-b94a-0d9224477816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d3a089fa-eb73-50d9-a09e-09cb055fd478",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2105d31d-69c0-5cbf-9bb8-2d67a75b645e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d22a73bc-8ee4-5c39-96e7-e238f4a676c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1de84ed4-e2d0-5137-8bc8-78219d9eb37c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:17611d83-4464-560e-ae00-827792817ada",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2f09db94-98f5-5119-a75d-0398b6bb034d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f814ba88-e270-574c-9229-db2aa201dca0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9442698d-4a1f-5820-8942-6906afcc87ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e4ad91ed-47bd-5ad3-a8ec-5e1d4e417044",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:824defe3-e5ec-5285-9f95-34d5bf669a64",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:69075a5c-38b9-5895-b605-026719834a8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:eb58562b-e260-523c-b932-a863ad5f610b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:866bf3ec-3333-5421-a4a4-60e609297542",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d65576df-80b1-5fc3-a3b9-5d7608d84d08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e15cd72f-cebf-5368-9b2f-e36c81d13fc0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3354c56d-48c2-590b-ac43-d49b66b30042",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65e5106c-76b2-5b40-840d-ac89a12a22fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c3f5a26a-d3a5-52f5-9a58-d4c393a5ad26",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ee7b1f40-d521-55b9-8b8e-b88aabee6dfa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fefff990-1cc7-5e8f-8bed-05fb3de0d6bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ecb43f8c-b588-5a90-8cce-37ec7261a198",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bf23efa8-202e-556c-bc69-a997e651ccc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e2c36ef4-22a1-5ba1-bbea-19934e8db117",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:672b64d4-a600-5ffd-85e2-79d9458c9bdc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da7f3435-3dda-5bea-a233-7bb0612e08ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:57469f9d-c2a7-5a7c-8db7-795130ea41af",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.12-tuxcare.2 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.12-tuxcare.2"
    }
  ]
}