{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:05f0fbaa-bb8d-5faa-b189-7ce38a05f400",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1",
      "version": "6.1.18-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2025-22233",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:feff9eba-1300-55f6-bf51-5b097e528588",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41234",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bdcecd85-bd4f-53dc-aca8-e898bce99591",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41242",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a0e2edfe-df5d-5dee-88c8-cedc5e8c0ee3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41249",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:02316a7a-7b12-560c-ac2a-cf381068eb2f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2025-41254",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d2f871ee-572c-5b76-b1bf-fe03b4b77096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-41254 affects version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e3593632-5c5b-5862-bdb9-14810b2204f8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6ab26011-6595-5831-afa6-5355e57f137a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8edc4007-74d9-543e-b120-017ae1a42bda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:83240018-45b5-5daf-9ac3-aac70701d090",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4d79f318-ae2e-5b35-93c6-8b7eccc4f4c3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0b6608a9-f4e7-5310-b0b3-aecd4c578a9f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:09718691-6712-53b9-bbd6-9f2415c184ae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6e421b4e-6f23-5580-bddb-d2be2410aa0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:228932e5-4290-5781-a1ab-fb6649a03496",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b7edafbb-5c6b-54d4-a8e2-1c8bb41d04f9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:de1fb5f3-1d87-5923-aa1f-941725d4526c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:cde1ff82-fbae-5342-a58b-748a1da04c46",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:303ca4fe-0c3e-5a7f-b02c-f8e5d31556b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2756e77c-c9b4-53c7-96be-62c3d4e4f35f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:7f51148a-467d-5b09-a8dd-a7eaf315e32d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f94723b3-9203-5698-9e6d-246c645768d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:76d1a81d-5427-5d6d-8d14-49deec8b4ea8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ba7de5b3-b075-56f3-8c7d-278dc5fcd7ea",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0fe9bda6-b6b4-505d-bdf7-a35c9e965092",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d70231ba-6739-5842-a084-a347da4a557b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0a95b4a2-78e1-55e7-994d-fea6d9291e04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:625a15b6-27d4-5427-a6a2-ca472ef7eb04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ada13b30-f5b8-5bd1-8182-c46c557eb169",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:57a84553-6159-538d-8588-2f0614566a40",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d56cca2c-6b5d-5813-9dd8-0b3e59da23f4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:64de18b1-dcc1-5a5c-b5a3-02674ee47c22",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d0244dbe-ff71-5605-8865-36e143a80cc4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6a2764f2-c965-5486-85f8-684962ffdb12",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dc561026-be00-5019-b0b2-4e87905c3c02",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:98e8891f-d411-5554-9b2a-a045adfdf680",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:568f7855-d2e6-5e9f-9230-baf9ce23c452",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0a18e3c3-b29e-5dbd-9701-5e7ade410d4f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a1427d0e-5ce4-5d89-bf4f-c722393012e8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e859cd2f-352a-571b-857f-f9831fb6ccad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a87c4d81-01fb-5749-80d4-661cc37fe9f1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.18-tuxcare.1 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.1.18-tuxcare.1"
    }
  ]
}