{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:34a338ab-239c-5d18-9d4e-3b897883f2b7",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5",
      "version": "6.0.12-tuxcare.5",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2023-34053",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:c4adc2d1-b6cd-5a1c-8cb2-f7967d3adee0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-34053 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22243",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8dda7388-4328-5fba-b8cd-7cf8ed208bcd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22259",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5c5a43e3-5d24-5a69-a618-5bdf6bb2e1f3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22259 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-22262",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:08e34c35-24f2-5009-8908-e3a6d8164349",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-22262 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38809",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8f8e9632-be28-5e53-9606-89e84e3154ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38816",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:64ad1387-fd54-54e4-a4a7-5cd552383bc6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:5b7f0346-6942-54a0-8e69-d31c4f2d0b13",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b83e790f-ee1f-5db4-addb-1104b6d4d3a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:93561472-6d5c-5e8b-9b25-c99c7ad14738",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:749ca3b9-71f3-5f65-bb95-4009a934510e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:af496581-cb34-5ad0-a526-9b8289dafd81",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3a75f92a-e21f-526b-9aed-db65d5896a89",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41249 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ba3167b3-95d6-5296-b2b0-1830ac09d84a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:94f5555b-4be9-5960-8532-708bc21aa5a8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d2863280-cdb3-5272-9f21-ab31a861ac4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:4c1d0d00-a2dd-5d19-9fa7-13cc7c2c6955",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e2ad619e-05ea-5c9b-b8c4-0bf3a34ffcf2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2aefbb2a-77d8-5736-96d6-97d628d29c06",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8e3ae8d0-de15-56d6-ab0a-38bdc89136ed",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:9ac16dc3-d274-5f4d-bfa3-daa1d4ad1d7f",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41839 does not affect version 6.0.12-tuxcare.5 of org.springframework:spring-expression. Current version of spring-framework is not affected by CVE-2026-41839 according to the vendor - https://spring.io/security/cve-2026-41839",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:f1eda211-2091-564e-9375-6c03b129cedd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:92270e0b-96da-5346-99dc-77fa5fbebd39",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:129b7fd6-40ed-569d-a9cd-3ce81344bce2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a48ed3dc-5790-5228-8cc1-a1f6a8be40cd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:36f35a4a-8556-562a-aa3f-9cc9c091284f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:70f91418-cff8-5f18-ae9a-9000a7e17eac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:813390fb-aace-5d18-9d25-430c6f5844db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8b827494-cabf-5b8d-ae14-cf8cd369835c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:3a03c7ae-b98b-5bc3-ba4b-3516d771e50a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0b2a1442-d100-5002-8f01-8d11e1e69a42",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ea5f1de0-a76f-5709-b533-bdc48538b4df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:dfb26bbe-3b53-55ae-a500-1bea920bc0b7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:86448939-b527-541e-a23a-db6b340a7195",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7311f7d0-fc40-5714-a1c8-abe130fbf10f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:662df77f-79c7-5cf1-a455-d34e46bcaea3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:8776f9b9-a6cd-5d43-9ed6-0ad28f5506e3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:a99107d5-6fd5-563a-834d-eec127426c77",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:38eefa5d-c2bd-5963-a58d-e8dafc3d81c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0f0a4ce7-f0cd-5484-bcad-dd35e554870e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:ff6ca3ce-adeb-58e9-8375-7cf5a1e427f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:b28cbc6f-f615-5fca-aec9-bf87eab00ef6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:1ed05cfd-fda6-5735-863b-952bbd7e7e80",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:2f2808e2-9090-5a2b-8cf1-c476f43da19a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:7577925f-c6de-5b91-9ebf-cf984035cdbe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:0a5a1275-69d5-5d07-bab7-5d34fda0dcad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:e823b864-ebc0-5f63-ad13-af6096e63ec9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:d5569f79-4f2e-520e-a3d1-842a87d1fc8b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.12-tuxcare.5 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.0.12-tuxcare.5"
    }
  ]
}