{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e858e98f-0470-5e5e-a3c0-0c7b72941538",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5",
      "version": "6.0.11-tuxcare.5",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:94a63e7d-e9e5-5ecf-aa54-59bf61f8c1b7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:612c940a-543b-59d9-b467-e6d4ed95ab15",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:04ad55df-4e1b-57ce-98d5-7409080d2391",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a4e8d06b-06d6-52d2-baff-126999081d86",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:56413003-8e87-5c00-ac04-af51d48e94a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7b8fb278-93ad-5678-ac12-dd334b70d501",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b999e945-bc58-5f05-8cc8-87ff52eb1b24",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f7e1726f-24d5-58e2-be91-6abfb876d686",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1e2bfc2f-5c40-5225-b5ce-9490683da96b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:eb003a2b-fa9e-5788-bbc4-571b3be9732b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2642ebc9-b9b4-55e5-b093-0b5ef7c18941",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0ddb5289-6ea9-5ae6-abd1-804b1a51b46f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ac2ac79f-ea8c-5155-8d56-74925aa889e7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:16608953-ad73-52c2-8945-779596c2db22",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:73e4c8c1-11fd-5ede-81ea-5ec6309ddc7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:bc6cf85f-c4ab-5ded-b010-ab0c369b9ad8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e4798b20-63a1-5c87-aa5d-f391919f2189",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d6d7ee60-3407-5755-8dad-343b1fe64b37",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a311ed81-f1e6-5574-96be-886eaa3ecd68",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d8cf9e89-19fc-5abc-8a85-8089fc23ffdb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2445a2aa-cc5c-59f6-993c-833841c3dfc7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c6097a12-9ec3-5336-a12d-32de1d06db76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c4d78354-1354-5cd7-ac10-25288aa7727a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2456d8da-60bf-59d3-91af-a55d8d8f88b2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f79fe88b-c404-5cef-bf6c-b48d71817fa2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:28280777-3074-5d8f-bd16-9b507df8b284",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:280c4d51-dba9-5206-b56a-c1ab75c3d06f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:539a2d07-1dbf-578d-a3e4-055e9a536b85",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d9c1b642-685a-5533-aa06-7affabf4dd27",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:cd64dc8e-84dd-5576-b74e-a551b6b1e14a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f96d9565-d771-55ca-9caf-a71d80410ad8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a5f5d819-0062-5c62-b69e-2b6db69ba682",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9803d3d6-419c-5d38-a38b-19413babb16d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:eaff4b8a-56a8-5b09-9e98-d53c13752342",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:74117705-3e44-55ec-ba29-9ab09600e332",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d8534770-8968-536e-bc8e-f0ab0e81940c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fd7ab44d-e178-58c3-b46e-712a9ba76a1b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a12c2280-b3da-5a2a-81f8-2b0ac864d43f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d8d37133-ccdd-5a8b-885b-a6e48a249968",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:20312cf0-01b3-5fdc-9e78-dd7c2dd09f6f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:807ff80e-f22f-5862-ba13-13ee9f293890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e283ed58-9ae7-564b-81bb-67d828d8a295",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ecc38af2-cfaf-5348-bdcd-8cd081d53104",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:55256888-6356-5f3a-a1da-f04575ac1d57",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:fc3c3233-b91a-550d-bb23-9d044eeb3254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:902cb58a-43f7-5fe4-9340-4e1d044c39fc",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a79c7d3c-1286-5437-8e01-b5e995afc1c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.11-tuxcare.5 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.11-tuxcare.5"
    }
  ]
}