{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bfc744d1-f370-50e4-80d8-c5b2263eeac2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.1.7-tuxcare.2",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:90440be2-5b6f-5850-bbbe-b2abafcb7715",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb668ec0-f690-5646-9986-50d83424041d",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d29b6f75-bdbe-5097-9389-32ffe205f917",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38819 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c91938b2-ca93-5d6d-9e66-aa85ac4dd183",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd4b5e78-4a2a-58af-85b1-cbeb574838fb",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a81c5227-9ea3-5ad7-9831-e2632c8cefd3",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41234 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1889471-4f92-5647-a8e5-cff4dee8d55d",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6939596-387f-5720-a7a7-15beaa3ed1bd",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c1f8b40-85e9-5ad5-ab9a-0f73c2e7ef37",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b31d19aa-e17c-5335-8d17-4a84b7f28f81",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22735 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7df264a-7f55-588a-bebe-379f4c0ab7a6",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68341bbb-88ea-5340-82b4-207a61806362",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:030ae5a6-d709-561d-9f1d-9c4f55cad2c4",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:800f26bd-4777-59d9-b7d5-6635ef4d8f27",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7990fb7d-7d2a-5eb5-be2b-2d5bb549b361",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dee91393-070d-5194-89cc-c59ee23b0723",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23dab30b-db31-5372-98e4-fae9f1ebe87b",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed7f0e5f-bfa4-57b7-8f36-b75e66243662",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9155a72d-8445-5a34-9709-69813edef46c",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:def96e65-ec59-5cd9-a795-3dcd7670dfd8",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:670e8db6-ac65-5c7d-a378-3d7eeeda1cd1",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49ab9a49-e881-5956-a5e9-7a1eae777d58",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45dde780-f0b6-5600-a081-2114f85a66da",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21d02f01-b05d-5e57-9778-96c35234a91a",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63f8cf39-d4aa-5c88-b2ad-0c386d09bce4",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b8e2d18-a2a6-512d-80eb-518db435949d",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3037820f-395b-5729-b178-0e2636a3c439",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f629ca08-a3aa-5265-8524-cc62bb61eed7",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aab9543e-6bbc-5417-86cf-871c0784776e",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.2 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.2"
    }
  ]
}