{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f882d81a-8000-52c3-8565-d5fa11bfa476",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.2.1-tuxcare.1",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:92c25b24-93f5-5038-83ce-9ad0a105589a",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2294806e-44f8-533a-8003-152f7e053c68",
      "id": "CVE-2025-41234",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:028bec98-f192-5b9d-b04a-36b592051148",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e8472af-92f1-504c-8c60-a3becce3cb6a",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73ba1490-6bb2-5b6a-801a-fbdb0b5eceab",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c92af5b-72e5-5b06-854c-b06f577f279b",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47fc718e-ecbc-59fe-aaee-8084bf44b418",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5171a14-7504-5d26-ad5b-43bdc84b2ec7",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22740 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c559356-a680-551c-8180-407fee9da29c",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83207071-113b-503f-8e55-e483f9db2996",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b083314-41c6-52ff-ab47-794152648724",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7165aa9b-1e30-51ae-bd93-45486f3a0654",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cfa61fc6-7c4e-5d5a-97ba-fd93cd6b6ed0",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58626146-6caa-5278-b270-2fd07dc820d8",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14054fc6-a471-5f54-8823-372dca641e28",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d2e9314-7c86-554d-8ee6-5c1a6f61242b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6851a538-c5a7-54cf-a6d7-400685c4e6ad",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc7d9dc3-1cac-5402-8afa-2b101fabdc2a",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fb27127-c48e-50cd-bd0a-85ef787a5f67",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3142bd24-2a8b-52dd-9919-01a3f334a5fe",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c184307-defd-589d-8cd0-d942d907f3f8",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d082c45-691a-57c0-a340-4da0383583e7",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f54a418e-bcf8-5f6c-b78b-cd537d9856b6",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b1c0df9-93f2-5ef7-8ad0-755848467bdd",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af9e3e91-6c13-5b07-977c-33c7000f02bd",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.1-tuxcare.1 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.1-tuxcare.1"
    }
  ]
}