{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b46b4a5d-b5a0-5b1e-ae28-b7c6f0afa1b2",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2",
      "version": "6.1.14-tuxcare.2",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:b63ea7a5-995f-5f6b-9e17-49f2cd4785ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:bfa79af5-3b3b-5f6c-8981-de8bd94a433c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09cbdd74-99ea-59dd-a2e6-f6b42723a359",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a282c53d-f5b9-5582-9b87-7e0771196bb5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4321f70c-ff97-5a23-b264-a512e91fdb83",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d08f6663-cc5e-59c4-ad01-936524e92f2b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:29c61176-e101-55ad-b58c-ff74a921a84c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:4661f0a3-e7af-5c4c-b7f4-d63fa9caa143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:61190ead-163a-5a0f-b13c-384013c9b330",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:76926e9b-1f64-5208-bfe3-a7a01130f6a2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6bccd7c4-6004-51bf-9860-037810247c26",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5f8bea6b-02d4-56d9-b2b1-99f85d6cb1f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:24437b91-f7c1-5d8f-9f5e-ed5eb3355ecc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c4fd05a4-20e2-5c68-935d-10460dd9006c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6f95014f-e46d-5265-9f0d-45e8ba5d7a51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:42c21fad-b59f-5391-9d25-725b6d6b64b9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cab7a0fe-a7af-5a03-b95e-73589c099bb5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9f3a1477-1e83-59ca-a64c-a9f45a6da501",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:88c75bd4-3870-5108-a3cb-878958cc691e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f7a6371-8975-5ade-8c76-b8d4864b994e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f8058305-2506-589e-86c6-918aff13b41a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f123ea99-59d9-5281-af16-d92739f80f40",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7d7c93fd-b08e-5ac4-b3f9-ddd42be574c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f84b402a-96e0-5aec-9968-1fdcec6a99ac",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:86a6f5db-df84-5e64-aa36-8c0743bfcc3c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8da80590-0403-5972-9869-28f79722c604",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f62393d2-182c-54d3-bd3c-317ec6a6acb8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:180409e9-73bd-556f-871b-28ef0f712493",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e813dc0e-999a-5b1f-bba8-b6069e4a0115",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:fc8a26c6-7707-5997-9271-0616dc0343f2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ed190937-cd5a-5112-a0e9-0c2a4666a8e6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:c2d79d73-f556-5023-bb29-8af6c9244ee5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cc6b410c-9f07-5e3a-8e1f-17ed774bd470",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2e378507-88fc-5c29-98c4-bb428cd9fff8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:84d4ab20-4733-5810-beaa-150dd86760c9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:22eaa503-2c96-5562-af9e-3acb83024e31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:2c7d5a05-dd2c-5a5e-9f43-fe4beb9d68c1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ded8f58f-08a0-51c6-9b85-de1c88e40b0a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e04b8363-260d-571a-be1a-c1640347b940",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1f5a0fbf-761d-55b2-9e16-30364de160c4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.14-tuxcare.2 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.14-tuxcare.2"
    }
  ]
}