{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8ab9dd5e-d164-5fb4-990b-f6ad410cd94d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.21-tuxcare.10",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2055299f-42a0-5ab7-833d-21ab1886fffe",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.21-tuxcare.10 of org.springframework:spring-expression. Version 6.1.21 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: ee62701f5634e904e42e218baad142cea2bcd332\". No backport needed."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fffcbb9d-d488-52aa-97e2-76ac38264298",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b28c183-a286-5efa-b165-0f0d6e33b573",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4ca2723-65c1-530a-9332-78c5fb23fa05",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3763d7f0-d784-5138-b628-b183f69f7838",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11554a05-3354-513b-96c5-4a1a8e924b1b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eaa5f18-493c-5567-8ddc-853c1ee7c4b4",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69f5ec1b-8a40-5e78-b248-b0ded85c4795",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac619e99-5f6e-5ff1-b1a3-1509cf33d930",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7658a5d4-a458-5bbd-9c3c-7aab8bbc6e75",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:144f83cb-9c8b-5f4f-8154-c7621fcc658a",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:031c3245-beb0-57b9-bbe8-4742ac3ea247",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8858a50e-93c5-5a02-9882-1ad868274133",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58c26bff-f88e-5a06-b7fa-198ceb1fa407",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e4fc104-8968-568f-8c4f-e0d3d033bc84",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14492063-b858-5e03-b4a1-fc6065d51093",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99cc888e-3014-55ba-befa-627f4e40b25e",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36226a53-3d3d-5c28-95a6-05d527b0690b",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e91e7dad-9e5a-51b4-81fb-d0e0089bcff7",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:219cdf35-2da0-5ccf-abb8-bd733e3efa48",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bea9cae-7080-53e3-83b1-beadcfc1ac72",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01b836e8-6790-5190-8a70-a6257890083b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a0fc35d-e6d5-5255-a53d-524308462bc5",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdfdef53-634f-5b6c-8873-16a967ba84b8",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e101de67-108a-518f-ba40-f24077680128",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.21-tuxcare.10 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.21-tuxcare.10"
    }
  ]
}