{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:384ab4c2-520a-56f3-92f4-be788d0d8d92",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7",
      "version": "6.1.7-tuxcare.7",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0fc60af4-6851-5e99-aa35-79c93db60aad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:85dafb1c-e547-583f-8a2c-09f47709d94b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:942f9c91-c4e2-58ef-bf9c-e9c8706b4ccd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2702404d-a021-54f9-b73b-2a2c9cfc85ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:9e2fe1a5-07fb-5ad2-ba58-df127a331ec4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d492f5e9-7e6d-5cd8-bf3c-742d580586e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:832bf67b-9dcd-5cdb-91fb-5f6054fbc427",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:63ac6b11-89a5-51a0-84ff-03f7a0e0d0e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0032e1ff-07ad-57ed-b66d-68e42a8e6a1f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:88236433-32ab-5223-9a97-5b887b5b358f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:15b5eba9-e079-5b30-8b3c-5b6d94c902fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:04dc4dca-abf2-5f9b-a426-e9287c6b68f0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b928be44-a016-577b-96af-0150ca304474",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:47d2587a-25ce-5a51-8406-442f25810797",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c40c796a-af0a-5188-97dc-cc27d45ae22d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:d20e8e15-7ef1-5a14-bb7d-438ae7c03441",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:313a36e5-e03e-5a88-a13d-eb74096b28d1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:56b9ec6c-226e-537a-b2b3-7dca25fe0840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ab877e05-763d-561d-9543-b5f853930a76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:54faf436-f497-5b4a-a6e8-24cf8aed2cb6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:e93e570d-a8a8-5649-b807-03d2fb732ad2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:17cec4ce-1e54-5550-86dd-ab1aa2a79a5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0d955fef-7661-5f4a-9500-c5937fee55d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ac7cfef1-be5a-5660-981f-529778d1f022",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:93b6f4c2-3fdc-5b1f-931a-811a278ff88d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:2b3ea7e2-6710-5ba1-856b-5dcbbe13af78",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:035511a5-57b8-53c5-a5bb-6bdfa1bf538d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0bef61e9-85fb-51a6-9150-0b0cb47ad396",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:876a540c-d4b4-5428-a025-c25c3c2c1e55",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1af0067b-5299-518f-b5de-1d85c69921f3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:09729d99-fdeb-5969-9666-e5c0ff757aef",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:367bf7a7-b6a5-50ab-93e3-e7328504a1b2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:28229b12-1e2f-5b61-b00a-d2c0a8969003",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:34a96dcf-512a-5b47-811d-eb80cc73e84c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:1038f1da-3132-5ecc-a7c2-85f414d00238",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:c87e1e49-6819-507b-b733-a979e81c4e9d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:effe130b-30d5-5fbe-87ef-58ba9677ebe8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:eb4e093c-edcc-5a5a-a317-2882e6a6d529",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:4037b58b-e045-52b0-9915-7dd5036152e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:0bafd8e1-2e9b-5fa2-89b2-9dc79c7b49e1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:5d1c8939-cdff-5049-9434-cb591b0d8f4e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b4452afa-ed15-5bf2-b3f0-ac96c975ffc1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:b450222d-c406-5539-b21c-ee5221ca34ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:ac3d41aa-b08f-536e-a617-38c945b557c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.7 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.7"
    }
  ]
}