{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b8ffaafd-3c3a-5c8c-bfb5-f68f8d57fc8f",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3",
      "version": "6.2.3-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@6.2.3",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:07005740-c1fb-5485-9c73-c5fd6af0f9b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f997c268-4d61-5c08-9239-cb12e5d3afd7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c3584ee6-7c42-5633-bd0f-d76821935cff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:285713a5-e138-5b67-acc5-c605c3181b4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b88116a4-ec56-5e23-9c46-e82da87f9cf8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bc825797-f8ef-5835-beab-c2232b4b9ae4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e82e6d97-79ff-57de-bb50-6e7c26973145",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8bae2e65-70f7-5d1e-b07c-ea8a783d0b80",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9ebace81-8f0f-5936-b0d1-5db752c488d8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:807a4ef5-a593-58b0-8650-b952b5125764",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:32180c6f-722a-559f-8c81-69a16b975b39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cccc5581-6f2b-5237-a9b2-c2f45ca46cb7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1d55562e-a0c8-5e01-9566-94bb45684913",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2671ace7-50ff-57fa-b23a-a9aae7a0f986",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ac20119f-3d40-552e-87ae-4f1a49911783",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:542a2863-81b2-52a5-9734-36fa444d306a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:79fd3484-cffe-58b6-a44c-b2c7a22c87bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8305db89-bfe4-51c7-a9c1-946642998d70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b636739-4cf3-51e9-a47e-7ac94837fc6f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:21d3c41c-b7b0-54ec-9bab-6ebbf4079371",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:27e56ebf-3772-5c44-b443-15181e49780b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0f3d98b1-e6bc-50d2-823a-c8aee331451b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:71c1ab85-1cf4-5123-bc20-3f7a91a589b9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:88d7f86c-358d-58c3-a994-6f19e0a8a6d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8548e604-6932-5072-b43c-8113dd9d010d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:af1bdf46-0da3-5e0f-b99b-90410d8918d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9b65e006-57b6-57b9-ba54-0bf440cac558",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:97207d86-4852-5520-9c15-5f3e106affa0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1b2ff07b-7ca4-5c0a-87da-325800c1f744",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:d9c6ad72-513f-56e5-b385-1a24de15f219",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:181a32f2-9b81-5c30-abfe-c832e3573d37",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9926379e-1e18-5544-95b1-136ef7f3e7b5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:892a1757-6bf5-5824-b283-d5661547d20d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5ebbaafc-bbfb-56b3-bbef-d49718f92edb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5e3c27fa-7179-5d33-ab46-d9f42c856e95",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8cb56b13-b1f9-528e-9020-050db80a983d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:aaa7feb9-3c73-5302-8f89-184ef7063a5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:32f89228-5476-5d81-abb8-99d6e2749262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:815d1782-9812-53f8-8cbb-743f1c321878",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:55d147e5-6d3e-5648-b94c-896d5250f28d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1fdce629-4310-56c9-9713-c297ff991c46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:63a8ad0d-2da7-5c0a-870c-2a8658b2fde8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ea91431e-b6dd-5ef9-bcfa-cb1b720ff193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.3 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.3"
    }
  ]
}