{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7c3a6852-f2ee-500e-b10b-aeb1d275582c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.15-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:fdf52cb8-c5b4-5f51-b979-6c225778eb9e",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27a8e013-d707-59fd-80ef-c9d50c9195f9",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae6b2d0e-d251-514e-baee-58a299536849",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e37fc6e9-9cd6-5851-9235-96f182a0a557",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bec1e417-63ca-5c53-a45e-d2dd2064ea6e",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5dc0f089-9b15-51ae-8546-fe9419d7ccd8",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58401300-6a9f-57b2-ab4d-d312b70111cd",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0b836ff-9310-5d3d-9bed-3b3913ea7812",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48cf268f-5364-5207-9917-74cc86273a6d",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d29470a-e5a3-577e-a760-c0f00f68c01f",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64f23505-fb0c-5024-95a6-506384cb26ba",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01bc320e-6a9b-5f0c-bcd8-4ee5c9a8e12f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28534c08-46c2-520d-80ba-d80dfb8f39af",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:744517b8-492a-5ab1-837c-3bb451fd3e52",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4420b20d-f287-53eb-a279-e4387f8d5c16",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ed73752-d6ac-5289-826f-9ef55b558ab0",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36b48af8-ad57-5ea0-ba04-e1e0c281fcc2",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc4860c-3e93-503b-b512-a50b088593b6",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6ba5563-cdb1-5d00-b051-3fa04d1f973a",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8904a06f-a950-5f12-82c4-9890e33dfaf1",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0206d900-ef0b-5610-aef8-3af0bcfa5021",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6aedbb12-a183-50c8-a368-bc789bb8cce3",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:899d1cd0-92eb-5f58-9550-5df9d008baaa",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca1c127-19fb-5aaa-97dd-3e2b77d7d497",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:669fcd98-98e6-5de9-924f-fa9a67209ed1",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.1.15-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.15-tuxcare.2"
    }
  ]
}