{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:c9640cd7-a09a-553c-b712-a73a567bc8cc", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5", "version": "6.1.19-tuxcare.5", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:faa6c85c-799f-5e3e-850b-8108d5cd7985", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:009bdc4d-29fb-59af-a8f3-0e748c7d7239", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:d78d5633-24a0-5aae-ab56-fbe820b00bda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:6427bb9c-854d-5116-bc1b-713e70db275f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:ec626ecf-eb78-58e2-b845-cce645c47241", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:1637ae55-5209-50d5-9182-60799a1bf9dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:e64ccbf7-c772-5629-a56a-d2cc8f26559b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:9004bd50-7064-5e79-831e-1d96ee1889ba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:87d75fbc-1414-5e29-8580-aecec84f41d9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:fd7378ca-4f93-502a-a37e-48ff3529caae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:8124089c-3621-5456-833a-7bd80293870c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:6cef9f04-1829-5c9e-a393-07ee24f27c8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:2301f6d2-7ad0-5c98-9a4e-a248c7486e35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:5efad990-8963-50b7-900f-8759e76aa28b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:95fc336d-96b0-5a56-bf3d-4ba5f252fef2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:cb08d299-8fc6-5ee6-84ef-586b00b5d6cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:ca29760b-07f1-5e4a-a34e-45dc9d1d4fb1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:8f812718-0cf9-50a8-b0c4-f65eab6e1223", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:49174ea1-a153-57e9-8a2e-aa38bb0bea89", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:d38e01f5-31d9-5707-b601-34b18ef7557d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:8a228207-a888-5a10-a47c-eb0af53bf6f7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:83e46ab2-b580-5896-8dca-c2ffefdc2ff2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:41b0fe59-0b45-50b7-822c-b24a68f9e820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:a4d1c991-f8dd-5c44-92b3-71c3e35dc9d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:545ff5ba-51c5-509f-a236-5788804990db", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:602c4faa-fb7f-57ec-b387-dc78930b3086", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:3a5b6db9-a898-5c3f-bdc2-25ba2625c6ff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:70f6ad7e-6c23-53d5-bcd6-0870d3ae1f59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:493d2e47-4e32-59d1-93a3-22e2cd3830e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:93c7ab37-ed49-522f-b0f7-7cfd23cb05c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:57f85c2c-aade-5535-b611-68443485243b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:21741b58-93d3-59c0-b00b-23a0cc979252", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:dc7f41f8-81ff-523b-ae0e-7bcf4fdda8a4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:7d6da001-7e26-5b88-940c-d6db26284108", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:aeb75fd8-3c03-5c9e-bc1a-c237c85375c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:6c146ab0-4551-5c90-b52e-3867e8fdf70f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:4326e355-8231-5616-ba06-be4bd430d391", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:17605998-35df-584c-965f-f7491aeaca1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:1e81d093-27e3-58ed-92bc-3147f2aa86f0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ], "bom-ref": "urn:uuid:e1deead5-9cfb-5c64-8bae-ab82a6a9fc1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.19-tuxcare.5 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.19-tuxcare.5" } ] }