{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f763c1f2-b4a6-54cb-bf47-7916e9681217",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3",
      "version": "6.2.5-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@6.2.5",
            "type": "library",
            "group": "org.springframework",
            "version": "6.2.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a2a63317-0044-5e19-b7fd-f354b8373006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e4c3270a-aef6-55ee-aa6f-0a8e71ccd501",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3f2e80b0-1f52-5e2e-ab84-3f4818600988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9ab766bd-df85-5392-ac81-9d877ec8644f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:c3523b83-6aef-598a-b7d2-02986528867f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:fd7c2c17-0b47-5f33-975c-e93f002034fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2c3b9481-12c3-586f-a477-ed24c599419f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2f941200-04f9-5b2d-963e-6fccf8c4c516",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6e4bb2cb-dd18-565d-b406-85788b57d111",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b9f6ff12-6fb0-58a2-bca3-dd1d735f0a9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:baa05b00-b26e-51a6-927f-ad2bac69fd22",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6ad6e83b-31a2-5802-bb59-136ff15f4527",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2d4b0fde-9304-5b37-903a-35a40dd1dc5a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:06d80c43-76d2-5c51-b2e4-2903d025adf1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:27d972cc-d2f9-5969-95ae-53cc5b64df69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8ecafa4a-3853-587c-ad79-869b458d8c03",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2ea8285b-4383-580a-a5dc-097a37814193",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e0c6640d-b166-5f70-a346-d634472d0772",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a4405863-ace7-5e93-af51-a023e656f136",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9ccf980f-6b5e-5c81-a130-361cf5c592b3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0267e6a6-5b57-5807-97a4-40c98227feac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a360bcac-17be-51bc-a85a-6fe34bcadef7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dc2f85ae-67ae-520d-bb81-fca14cf255b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7644262f-629e-5932-a7c3-707dc46df551",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5507b6bd-2f9a-5b62-bce0-f0646ba7db4c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9ae3c1b9-e9c6-5229-81b5-646d5bb45bfd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:92414332-8c79-5c36-bfd4-96cb65299a4c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3b78b83b-1ed2-5b51-bfbd-18bfc42b429f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1eb7a6f4-d3cb-5177-a507-c1ba4a0baf14",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:80ec8bbe-5ff9-59f3-9a20-dbfc34a3eaf3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e0d6881d-9a92-5af2-9f2a-a1c39e5f3d93",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f7d577ea-7699-597c-a709-e0e994366aec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3141ebc1-1680-5b59-a682-86fb763c9675",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b1a18dd1-a56c-5574-b6ac-87c02fadd852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1011de48-7dcc-5642-8515-2592a53ca718",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:de9ec779-9af4-54d4-ad09-ab9c8fb9e466",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1bc3afe7-aed8-50ba-b813-1f88797dbad8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a48a815a-e7fd-56e1-84a5-ccf873145b5a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:93726227-6b5b-52d0-9c22-795236df3e15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3055cdc1-398f-57da-90a8-d270c742b141",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2b4851e9-11d4-59b6-b56e-f9bc9ed60387",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e2d567c8-a9cd-5db9-80fd-68f806054296",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6299b74a-f3a5-506f-ab31-b52f766b3b34",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.5-tuxcare.3 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.5-tuxcare.3"
    }
  ]
}