{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4b94b0a9-3734-5b48-bc9d-bc09ab56b3af",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1",
      "version": "5.3.23-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2016-1000027",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c46882aa-9b29-5aed-a347-26e70bbd15e5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20860",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c10e6551-dc08-5434-a3f5-d1cc06af3b12",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-20860 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ae96fa92-2cec-5bb3-b6fd-a8088d73acc5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:353e9258-3abf-5278-b5e7-7ff57bf511de",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3a535901-5407-5165-8104-8161e7b02f69",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22243 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:57873c61-9f48-5914-8362-aa1023102e34",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:774e3a86-bc3a-570d-9375-c8237c5e5943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:73d35271-3ac2-56d7-97a3-90dfafaa46f5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6d8427b6-8dfb-5d7c-b220-9f6e4dc5709d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38809 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:51b7e9f8-7d8f-5324-a37c-be889d3a7fa3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4553cf4c-7cf5-51c8-9d34-117c6045dfb0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1c7e5c7a-e997-558e-9088-c04d514f01c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38828",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0eaf888b-c813-5961-a4d3-489d60130d78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e886846b-dd83-5f63-87e0-b90bd6b9a08e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8769e552-9008-5b6a-b05c-f2e8fac5b3b4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a3e01403-ff8b-5b79-b207-35d73077f728",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3529f255-3682-59e0-b67f-ec9fe16bae07",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a3a34a29-f4ac-5c93-aaca-5f5b294025aa",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74e46110-cdcc-536a-b6c2-b806de5aeb8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:304dadfe-fb1d-5d00-9130-63dedb95ef9a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b00ee43-0c0b-5d38-b901-a791bce230d4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:484b6ca1-02df-52ef-ab2e-e81d97ee0a56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:567ca583-9838-5ceb-94ea-431be099573d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:48480ce7-fd8e-5a9b-b8c7-0c8c45b82f56",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:86cde6f5-6e66-5bca-9e63-9eddb11037cc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d8ce3b35-0e0c-5b87-8e6f-90fb89179ea1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f6381691-4788-5054-9f96-d7cdf37898fe",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:867bb4ec-ed60-567f-902c-2da7b8e8debb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e01f6a96-6897-5a59-8241-0cf5fe859d28",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3764d741-71fe-5f44-8fd6-4a48cb31dbda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:85c3c18f-312d-5b1b-9da3-3ff3d2e4e756",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41847",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:acd2e68a-976d-594a-9f2c-7abd2483e07b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b918b16-81a1-5ce2-9018-f4f26c5903ee",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dbb67523-6f73-5a25-b649-048f59fb9949",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eaf886d2-7335-51ee-82be-1cc0c75ab0ba",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:37e063a8-5348-5dc4-97f4-f1d7f4d3bb24",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b1d96531-59e8-51a3-8edc-f67093a1069f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ea8cb8e8-d3c4-53b2-af28-c915f1b393a6",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3627b30e-dd9a-58e7-830e-b6a321a88906",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:aacb6d56-06eb-5029-a8f8-c9855c0ba9c0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e14b67e4-719b-5487-a0ef-3cb8cf9a5638",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:979441f9-7295-58b4-92b2-ea498781b051",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e99734e1-9b13-5d6f-baca-bb11dccc7ec8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5c3260b3-4076-5e31-a962-d20765a3ec01",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:32763d44-08c1-5fad-b1b7-fb7cddb0aaf3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f38b3762-9816-57ad-9751-38e7109f931b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b542ca02-e207-536a-b306-2c5bfbfb8d89",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:03f745e4-da60-5bb2-b022-d6928474babc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1e8a2e65-24e9-53b9-8f9e-0bdabf1a53c0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4f9fe62e-383c-5269-924c-9c97506e4f14",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:828cf8cf-f74e-51b3-b9f3-2b40042feda4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d3ab431f-76c7-5f04-a215-4c0c26bfc9f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:035333cb-8456-51d8-a802-ca05e3b6ec39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 5.3.23-tuxcare.1 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.23-tuxcare.1"
    }
  ]
}