{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:dae19d36-d745-555e-85bf-99c0a0241dc2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7",
      "version": "6.1.4-tuxcare.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0d74204d-dfd9-553b-9590-e3b73378ab3e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c906ec52-0a59-52c0-8737-b514f5681db6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:83d4da6a-9525-5cbe-8334-2606008b6a99",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9b589bbb-0edc-5bee-8dab-9ae85c736c15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:8b9188f5-1ce5-5826-8447-4f6d4ac532b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:208995aa-4e0b-5e54-b8a9-b006b62a95e2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e116509e-56a7-5f11-826c-5e732b5dbf80",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1fa3521e-3fed-5103-8bd6-61625b056c28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0dcadd99-8a39-5746-8b50-c6be73c1da2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5b8e2275-887b-57e7-98d3-f4d1cf18111e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cfefc353-52e7-540b-82da-be10ab549638",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:48cf5bee-38db-5da7-b910-8d18bafb099d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:372cc446-b28d-5449-aebd-cdb6200927fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:67f21f13-a21d-57a4-976b-eed49abd538b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:21783b21-8371-5302-831e-cd430a16986e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:cba14d1d-d376-5697-ae10-db75bcadf80a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:803daf31-5654-5c8d-965b-6fc8b113d52f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:bbddde1c-f4d0-5ec4-9869-fec9f03e8703",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5acc1a08-19be-53bf-a76f-dded402a1ba0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d16e44d3-133b-5a82-9191-a1b1e6bf76d6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:17a20f48-1afd-5bbb-9b2f-1369a6d5af33",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:676b039e-4b5a-565f-9cf8-d0b946f2f39f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:929e0fa7-fe4e-5304-8ca3-e075a271e8ba",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a1983b3c-2d1c-50c9-b8cb-a6b98b9be563",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b93c82f0-0c45-5b70-81e2-99d398b036de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:fb93edb5-f8f5-525c-b5a0-4859ec46c9b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:24c1503c-8dfa-56e2-b4c5-4fb2aebf75d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b2d050ea-5c09-5429-b8b1-3cdac2e5f090",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:91a3e2fb-d335-5985-b980-ef3b72273b22",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:949879a5-ea7b-5fef-b2e2-ee784fc32a8a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:dd07d941-032a-555e-b2d5-40bacb8ad132",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:93d6a22e-4a0c-5b3a-bc05-9652219fdd9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1664fdf1-e680-5609-ac96-d9505db60965",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a1a19804-6a61-563d-a998-261eeb410918",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1bf14f9c-ca24-59bc-8f0c-bcfcfa8e02bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:a3e8a397-4660-5451-a890-0f0bfc5ba32e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1ee6629f-2899-5128-a27b-6bb3c86a6b7e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:27786f0c-b294-567f-bef6-c52795cdffee",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4f50b4fd-67bb-5ce3-a3e5-62c863e9432d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:92bd5338-5fc8-5281-8831-e228e9496992",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4e8611a6-eb04-554e-99ba-c83af53ef6a3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d7a25643-3c86-540f-b6a0-142f13c0557a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d6700059-fb65-51cc-bb4f-0820730776e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:3b2919f3-95f0-5148-9117-f11fe3031f1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d3353880-0d7a-5c9d-be02-81c40eaaa2f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e28e2cd5-a443-5d29-9041-fc3e07e96cde",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.7 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.7"
    }
  ]
}