{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c345ccb6-436b-52fd-8af8-422b74b148fa",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.19-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2dc65f5c-a710-59cb-a6ae-d1a644e20b00",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f4bdf7b-7f62-5119-8a88-766f05bd7742",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd7b0aa6-2bb0-55c5-ae61-f220590d0c2e",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41242 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd18f9ff-2fce-5955-97b4-5c8dd4508f6f",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffa2f590-ca41-5146-a519-e985734034a3",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:180c5347-3e79-5cfd-a6c2-7371e764b8e8",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01c12d9a-bbeb-5d74-9f12-167ba496c751",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d7ac28c-600b-5d10-9609-45dbf312c89c",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:168f8999-fb3a-5832-8101-ae646ca0db57",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59dff282-2c44-5f62-957e-65b95ce6cbd7",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cee7f35-7095-5384-8f29-3b053a413bd4",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a66e5235-cb15-5e92-b115-8c58f8ebe859",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a08c367-3eec-5c3b-ad55-41c369eedcf2",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20a622ce-c2b7-52d3-a284-9bac3215ba4a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e45883f-0472-586f-9ef0-5ba1c0b5de96",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e04dd016-1543-58e0-84da-b821a30998e7",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab139915-3e93-5710-a58b-2f0cfb00856d",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53697e2a-f6cf-5bff-a162-215d20abe65c",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09ed0fd6-62ea-58d9-bc89-c0780462cd7f",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01e3f61e-5313-5fdc-957e-4290a8bca854",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6a81071-b8f4-5776-acda-cb156be3a838",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e13c00b4-ab56-5e54-a0bc-b89353329df6",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19975150-0361-5585-a135-6fdbc8978524",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a6e8ca9-f472-571c-8d23-7a9fc68b0f62",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68368b92-4edf-588a-8d55-8c568204852c",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f53703e0-0815-5ac2-95cd-3bfcd257c461",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17eeb048-2478-5960-a346-d10b869b29c4",
      "id": "CVE-2026-47884",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47884 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c02a5b8-43ac-5714-8ebd-afe5d6a3f902",
      "id": "CVE-2026-47885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47885 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:896c7a27-aae1-5387-a5f9-5dc9d944ab89",
      "id": "CVE-2026-47886",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47886 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac180fe2-8c61-5931-9ea9-02d3d57d8c21",
      "id": "CVE-2026-47887",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47887 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5eff042-d487-5292-85a7-71af3c33662e",
      "id": "CVE-2026-47888",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47888 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be1789d0-28f8-5663-a881-8b267ae95bd5",
      "id": "CVE-2026-47891",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47891 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27ea1237-7a17-538a-b979-8f42e4403007",
      "id": "CVE-2026-47892",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47892 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a6413ec-3b12-55dc-b489-76d1aacfd03b",
      "id": "CVE-2026-47893",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-47893 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcc6c1fe-e5c7-5c81-99e9-13158cbb3251",
      "id": "CVE-2026-59280",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59280 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:70ad441b-2162-52bb-ac78-5a12f50eaefb",
      "id": "CVE-2026-59281",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59281 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e214aa7-a189-59bf-a71a-59853f1dc2b1",
      "id": "CVE-2026-59282",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59282 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2de3c6af-e5eb-5d33-af55-f8d96f804c5f",
      "id": "CVE-2026-59283",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59283 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2d9f72d-0c55-5a67-98b3-08da90ad1f0c",
      "id": "CVE-2026-59313",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59313 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:524a0ec0-7511-5928-abcf-f0f54c358f2f",
      "id": "CVE-2026-59314",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59314 affects version 6.1.19-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.1"
    }
  ]
}