{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a07aa6f4-aaa9-5c10-983d-69a4e1631885",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4",
      "version": "6.2.13-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@6.2.13",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.13"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:fdc06495-d49d-5a62-a8d7-08afab9ef3c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:483bf8a3-e8d8-5600-b0d5-94a4a6ab1325",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e8d09814-384c-5904-bb12-1727f5875381",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:737ddfe8-e07d-509c-a5e2-072ed0ce38b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:81e7638f-b9a2-591a-bf01-9f76e12adbc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cd6f5975-027f-58e1-bd75-9632073fafde",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c7485e0f-97f8-55bf-af92-6a49902a5a80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:e78acd07-27a8-5e48-8752-16edffce7282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1f8d54c2-ceb9-585d-a20f-c1ff51fd457a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:91d3df1d-2060-5e8d-9741-c18289265073",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d617426b-3aa6-5f03-9c56-c5e2291b15cf",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1c5551cd-430a-57b9-9461-31b7aa06db94",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:446672fa-7dfd-5115-a179-2025821bf960",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ad5080e5-2846-55e5-a8f9-66847a0c79ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:59565dc3-53eb-54a1-93ff-9f8482457918",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d77e8ca4-442d-5a46-b826-89a21eebd36f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:9579b311-62ab-5e6d-b38a-d2b3e8ffbde3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:32a0be19-c215-55b8-bd95-6df301e0bdcb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:48149181-2df1-5229-9d53-896d3357120e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:434030fa-eb98-57c0-9a4e-6f4580159856",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:6694260e-2a34-5d36-8a19-f773c0f7bb9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:90a4bdbb-315d-5e60-94f0-9de0b49319e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:15564a5f-a176-5183-b5c2-f21ca2ee4cb2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:92a7a30a-1146-5754-830d-dddea22c6781",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:caf7ed76-90ee-572d-88fb-71a72f8957ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:cf7aad6a-bc1d-51f1-bb30-31155168d2c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7fe4c05b-d0cc-5442-8368-110aa69b5967",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2202acab-a7ad-5bcf-bec6-7ceb1ef06cb7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:40acfced-4ee5-54df-9dff-9d70f434e772",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:743a9778-b4f2-5048-ad91-0794205db736",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7cb9b0a4-0f91-5ab6-ab55-a42049d77edc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:0e41bfd2-5201-531b-ba02-2b92879edf5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:671dd3f0-c047-5706-96a8-2e815bd7e637",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f6f04075-d752-5f10-b5db-10d10faa8368",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:39ffc543-7d11-58e3-9342-bbe89b63dea7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:c7cecd15-564d-50be-8dbf-bb60d2b1a315",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:4c3a3307-f8ed-51ec-8a56-e9a799c5dd1a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:121b9f99-3f2e-5644-9eb6-1c9dc647f4da",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.13-tuxcare.4 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.13-tuxcare.4"
    }
  ]
}