{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:37663488-8541-5d2d-a779-a13a7c6ac3db", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6", "version": "6.1.16-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:d3917f43-6c3a-59c4-90e0-d8d8b5b18c25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:bd030b28-ece8-5355-9c4c-20e61831bf2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:5edd8d2a-041d-5b7b-ad51-f723cbe17535", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:d6ecd2f2-3519-53c0-94b0-600eba3621f3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:a4ad41fe-4bdb-539e-8958-7d2b726208f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:0c48e221-5f1d-576d-a39e-7d628a3e3246", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:85ba8b3f-7c3a-5439-99a8-48e2e8d31c63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:063aafa8-9dcb-5e9b-bf33-91018be6b9de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:17c61292-3f60-56a8-90c1-a6d307d59484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:54ec3bdb-0f13-598a-911f-3caa3927b842", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:fcb9cd4b-c662-529c-822d-6f96a4237cf6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:4344d16d-3858-5715-a6e2-c682f13f20c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:3d273513-401d-506b-b405-f4a6d16b1e06", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:87745d7d-0534-54aa-b4d9-e655cc72d359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:dd0eacf6-5dcb-5c4e-8efc-eb870fe9ce5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:64cd7a3f-ba88-5a89-b011-c7a83b350006", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:fd876690-ad6c-5d83-963b-0a8aecaddd75", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:4b60d6c3-2202-57e1-9045-3d2833652ce3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:a070c406-68d1-5404-a7b7-b1cff9c7fcad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:ab5b8b96-4aeb-5042-8563-cdc6653b4cda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:df6a89af-d2b5-5e0a-8c3c-cebb3cb9320d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:b88b250d-1611-59f6-b99b-ac8e3ab541fa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:34670f83-b3f4-5d16-a046-6542bddaac92", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:f3148927-18a3-5c63-9d20-9c3578f52c54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:ae3c41d4-21cc-589e-92f6-81ab7e8bb7e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:32ed113e-4f87-5207-8e6e-1821180253c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:06d17f4d-7e0c-56ea-b849-bb1347ada398", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:f42e7645-237a-5900-a4c1-3824f172e8e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:5f89db5e-d607-5eb0-bb41-527b1656a0e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:bf2265a9-c5bc-5d3b-9531-adf7659c685a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:2aece557-2ae4-593a-8979-6a7fe2355885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:0efd5635-3ce9-5cd6-b0d5-b095e66e39b0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:43c15d5d-c560-53fc-8aa2-86fc2846b97a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:82c4406e-60cf-5fd9-9cd1-c791b748197d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:dcc43633-5588-555d-9567-5ba5b159f827", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:0a36096c-8cdc-5f43-a0ac-300977006c80", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:d1f72dec-aaf2-5e46-8e63-df6905261ce6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:00f1550e-91fd-5ab1-bfef-8e917155c1f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:1ef5848e-7e7b-53d9-a8e0-54e823b177d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ], "bom-ref": "urn:uuid:b977f0ae-7acb-5999-907c-54fd455357df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.16-tuxcare.6 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.16-tuxcare.6" } ] }