{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2cade889-bfd8-551f-8e8a-e85d3ee8bea2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2",
      "version": "6.2.14-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@6.2.14",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.14"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5e577f68-2846-54a6-adc0-aac68fa49597",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bc1ed644-bcf8-5d2d-b886-ab94e7d579d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:955fd7fb-b708-5ddd-b9f1-6adaf2ec238d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6275ec00-120d-51d6-bc26-e3e6dcc54486",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a963d195-539d-5c2d-bc81-2801f2412b6b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7fa29fed-c8a5-527a-97bd-5b2ffb50a3b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ff03d8d3-71cc-50c0-a418-681676f6a0c7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:351ecf64-c90e-5100-830e-86ada534ec78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a99c5a50-6c85-5689-b60f-d3165629bcc8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:12bf6998-2bff-5e90-8b77-d285226fe3c3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:472e6585-50fb-5819-9752-9591c4371786",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7048a370-ca1a-5535-ad9d-3cdfcad8251d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:33d2ee84-f2b3-5be4-885d-cdf4275b710a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3dd2b6b1-2937-5e4e-9f40-97644adf666b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f61309ae-6e61-5835-b250-e8116d76daa3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:21f4998c-a3e9-5f97-a815-50df7065effa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:56c5d29b-bde3-5a8c-94cf-4eb9e5841641",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:81a61452-e35a-5051-a7f1-432bcfc3f928",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:411d4a0c-e21a-5714-ad61-fabb2e389747",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:62cc112e-fc1d-5813-8ff3-7a0031edf67f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:db74d3a4-4702-5463-b4dc-48d42e8f2bc0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7de88f19-cb30-5249-bb1e-a3aa3c0e2547",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8c7094bb-e73c-5b64-9dcf-09a879ee78d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:97f4f4fa-33c1-590a-b615-3546911ead34",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a3c464e4-b3d2-5c97-8e21-6ce3e1b51002",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ae4772f3-747e-5fa2-8ddd-8502ab1ad8d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8b3c341a-9496-5b1e-87d9-ed57a37fcd5d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:549226e6-0751-5ad1-a334-e54cd169fae0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f0a1b46e-3c4f-56e5-9a1b-d3c70787cdf4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ecb144ca-7a51-57c7-b998-e20322b30988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9c31c858-edff-5053-8b89-c5bfd3f01fbb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8977e531-0005-5cb2-b97f-a99f8c4923d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d9dd9179-9a39-5180-9a65-de49ae74cc76",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b752e5ed-fd86-5355-91fd-7fa63ef7f9f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a1330edd-7b9c-5fdf-ab59-8c71c924d7bb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9c3e6049-8c33-5218-9c49-5da78a081212",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9395136b-7e87-56c9-b1c6-55d67349469c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:05533767-2b3b-585a-8e5f-269f6e3eb58f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.14-tuxcare.2 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.2"
    }
  ]
}