{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:21f4dd56-4228-5ef0-80f6-ab5c25ec2e7b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3",
      "version": "6.1.13-tuxcare.3",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-38819",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8c299d20-89bc-5f60-ab9e-b6a218cc2cc7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38820",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:28197794-ede9-5fe1-8e6c-0f482dd85026",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-38820 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9138f447-9553-558a-a91d-75c1322bd747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-22233 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ff463e7e-ba02-5396-aa63-48f7c38ca7c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:e1ad01e7-49d8-56fb-931e-803335a06431",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:255a5f6a-6f1e-598a-a4e4-1a8888a6feb1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f55a4b4c-6aca-589e-abe7-f39622b35283",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6b272d08-80c6-58d8-9de9-984f88bd7d05",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:60ecf6a6-8143-54f8-a04c-969aaf43de3c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:96db2a03-1da1-59ee-aba2-67ebbbde93ff",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6d7f5050-a176-567d-8b05-f3eb2e2f8183",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:860d58e9-d781-584d-929e-17910f20e40a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:9a2a6d0c-8f59-5af5-a973-3ec826d268cd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:84c0e17f-b791-52e9-ab02-a0eac93a11c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:114bb459-d6b7-5256-816c-7c79b7b1674e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:39d29116-a1e2-50c3-b3ee-e0e1805564dc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:32a06428-1ac6-5e8b-87fd-20c20d76d738",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:1ba159be-7e11-574d-bcaf-8c1f2e919cc1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:0980256a-1b55-59fc-9796-8b93c31c0f9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5b5e12dd-9b37-5047-98d1-e438b3e1048e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:37f8b88f-893c-515f-aa73-c60c5cc6ce78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:089b8f31-8433-56e1-8e69-e2bd1a4495b5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cbd780b8-7114-55af-a3f2-33e65dc48430",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:04ebc226-34a7-5aa8-8d13-2faa8d988e95",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:f4105c87-78dd-586c-85ac-22d0fc99f282",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:02cfdfd8-26ca-59fb-b1fc-ab9a764f316b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8334c79a-0eae-5709-a455-1ce26c8cf602",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:68d639cd-fcde-5825-80ff-6177c0f1ebb0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:687b0ab9-3487-50d7-8f2f-a83a27261a8c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:37bc1a0d-c80c-5519-9295-0a91a0e67447",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:70dae1cd-a7b8-544b-a3a3-102dbac89ed4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:41155e62-4b47-5bfb-af88-8a48730864a0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:5014520a-48ea-5162-996b-f5091cbc9538",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8ce40d00-4432-5aea-937b-7ac48ea0db43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a676654b-90d9-57eb-8a97-09fbc72baa06",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:cbf82379-4eb0-5f84-a1ad-abf37b319c6a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:12a48491-e3b4-5b29-b9d2-14c04019005c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6d148100-8266-58b8-8d19-7d61d51ee5ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:b5b36be5-3087-5618-af07-f015ea4dd56c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ac164984-e7ca-5b60-8791-e69058a49d43",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ed5759b3-baef-5481-8a65-e8beee0772fb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:98b93f70-4491-5955-89d7-42771d4a5f08",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.13-tuxcare.3 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.13-tuxcare.3"
    }
  ]
}