{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:64702ae7-d1fe-5ba5-a824-2b7ed162ecfe",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.0.16-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:321d17f5-b43b-5db3-bf73-eef6a0370536",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:541cf582-cede-545a-93cc-a7446f6f1c64",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0a0902e-0728-547d-8ebe-5ff2ef2ee96d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a92dd57a-9d7a-5509-b70d-f87eb2767a10",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16689fe3-6a0c-5a09-85a8-0666ed7484c0",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d262f40-8ebe-59aa-be59-9af00121fdcb",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d688f941-3ada-5fb1-b3d4-707e72bab2c9",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f7b76b7-6f92-5439-9be6-890984f20d03",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:703d9201-2314-574a-9b50-d67dbe5040f4",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:739569b2-e34b-57ba-8b3a-66b5dc6f9232",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0743866b-1f7d-5a23-bad2-14a4204af36f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdadc27e-bdb9-5c92-b08f-231067090b8d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93b876ed-ca74-502f-9fd0-00b4ac05292e",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11f5d879-3e1a-5d44-ae85-462f7db9e0e0",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe0303e9-7f43-5711-a0d0-a92d88da1ec6",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0f7c30c-92a9-5af8-9163-2aeaaec7e0ab",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69d1d5cc-1fe8-5862-ac99-732281d58f9c",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:036ffd62-1522-5a6c-9f1e-558fe1938d4d",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:06d08b8b-330d-5419-a811-438641a2f8d4",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10d0dc9b-fee9-5b0a-9b86-470653810053",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae1cc34f-48d2-51ce-b9dc-7993b7f89e16",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e03677f6-8373-539d-a733-30abc759973f",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4918503-1853-51f9-956c-ea621c50e938",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e65e626-e49b-5339-b909-f22044a88880",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c2848dc-5685-5bb7-981d-959b24d94cd7",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:562a83d3-0bb6-5f9f-a627-3cf7bc6b65aa",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f32331b2-0d8b-5334-ade0-6a97dd3e0d22",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dde3d861-bd37-539d-8902-940d9bcdee2f",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1b9a329-e5bc-5d02-932f-631e7dd413eb",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce9d903f-f831-5c02-b7a0-aac1e806d575",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65b19b34-77d3-597a-b363-8c970238ff80",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8372697e-635f-5440-baef-af3655787813",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.5"
    }
  ]
}