{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:eca5a7ac-463f-5822-b5e9-063febf3af8b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9", "version": "6.0.16-tuxcare.9", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22243", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:94ab68b0-a8ae-5a4b-ba30-e810eddb4873", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:06dfcfd3-6449-59a9-bd46-64c0ac2b7a17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:1d513509-4879-5e04-b882-341d290cdcc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9b6bc72b-bc21-58f7-9185-db58ad758252", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:b616c851-f4d8-58be-9c64-4ae21453c7fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:8af7cc09-5656-51c6-af6d-9e3e5ee62a28", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:cf071f1b-323b-5212-afd2-ed3d8f70b5e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:a77c4e00-5897-54d1-a90f-cde144918d8c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:8e52f402-371b-5e45-a0af-0198622155e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:43a5dd45-1a79-5637-ac00-ef2893b36c3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:e6cb0e6a-5672-5686-937b-9ed072fc45ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:bfd6213b-7520-52bb-adf0-6e3cc6c1c1e6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:a80d4feb-8d9a-54e0-8df2-32623ffa8b50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:b38cb597-2009-52ca-95e2-9303615da508", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:0da76818-0386-54d5-9910-2bb1a234e690", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:f0f3fb26-b5f8-536b-a148-06dc144d7f3f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:a2a56e08-4b81-5f85-aa31-69c91b0acdc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:de054851-3f74-5f5b-87e7-a7f95d4e6aa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:fe7fffcf-0bd7-5e04-b12e-3da6509d168a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:5069b867-9b28-5d3c-a2bb-9518f5117950", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:1ca47932-754b-5f6d-af00-b769d45dcda7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:f9323c6f-67f5-5cc6-b104-56ac388a38a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:5aae597e-7d9b-5881-9b49-e929d1b1509a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:414daa29-cefb-5e34-98a8-2ecf0ccbc2ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:505746af-62d8-5869-ad2a-fd6e6fa32633", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:3b60066d-ab09-594e-8942-dcf1d8fce58d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41846 affects version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:85bce348-147b-5702-8bfb-0e6de6be93df", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:978d64d6-a1b2-58d0-9021-da83ca330225", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:23263690-ca32-577d-ab6b-c21ad5ba0999", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:baf8173f-83d1-5d1e-ae22-232aeb208f55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9181e92b-057d-537d-af18-3f740454db6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:44438b24-1eeb-5dbb-9c3e-60e7bc75ed6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:21adf06c-93dd-5f70-a6a6-9f4a7d14f577", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:8f070571-68b7-5736-a521-8c30b86e7dff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:84cc14a1-7010-59da-9e80-e7ecf540a2cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:0432bf7e-509b-5971-b307-1ee1ff80217c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:5643f944-13d8-56da-9dc8-4d00217b83c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:e8293695-3dcd-550f-b513-2b607f50a1c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:ff8b0743-2789-5cb5-9eb8-c3f434fd0148", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:9776016a-441b-59ce-8f47-e35e7b4ef8e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:849329c3-a00b-5b97-b661-c07baed65800", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:c86f73fa-8885-5564-963c-cd57fc8b5aa1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:87e2037f-869d-5560-9a14-b8ea81071238", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:a146707f-ca85-5823-809f-79e3278553c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:8e6cce19-460c-5b9a-93d1-6de25a1239a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ], "bom-ref": "urn:uuid:6b7ba8fd-9084-5c77-aa23-6e055656e0f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.0.16-tuxcare.9 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.0.16-tuxcare.9" } ] }