{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:12d1639e-2f4c-520a-9585-a17715be8203",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "6.2.15-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ad01f5ac-8167-5fd4-bc2e-d6ac79a003ba",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5a21500-ece2-5409-b184-bcc2c514d969",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e09a5b7-9536-5e85-b931-20b3e58dae71",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffedc51b-9ba8-5089-97de-acef6e25c30d",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cf4b26b-d9bd-5e14-bc56-20492b9aabe7",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:386f0365-56bf-596f-a8a2-72d1d33e80bc",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fd99d86-3f36-56b6-a0b6-11a37f76585f",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ffba05c5-a687-52a0-bfa4-71e0efb6c7f8",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b86782a0-da93-53d6-a954-73525560119e",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbd1cf99-4a3a-5fcc-a29f-addfd4d3fa1b",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:772894da-da28-5ec3-97a6-252493bda91b",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20577bb5-d43d-571f-ae17-1bd356cb1b98",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d54f091-9d23-55ae-8847-8eaaf67f51f1",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:417ad231-b2df-5baf-abe3-85528057b475",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ae38447-5405-5880-b152-d4f84ad3a52a",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1344868-4914-54cb-99b7-2b9426e21738",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d28f75c1-1f74-5fca-984c-9e6399eb1ca2",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41851 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:801f823e-0c62-5507-9601-1f58cf059c70",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bacecfa-8717-5acc-9d11-5692d73362e4",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e0c4bbd-b9c0-5e21-bf5d-4c0749604648",
      "id": "CVE-2026-41854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.15-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.15-tuxcare.4"
    }
  ]
}