{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:68d78108-f653-57e4-a0d1-645a76778b78", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11", "version": "6.1.20-tuxcare.11", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f9a782b0-e9af-5d8e-943f-694927179eaf", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-22233 does not affect version 6.1.20-tuxcare.11 of org.springframework:spring-expression. Version 6.1.20 is not affected by CVE-2025-22233: the security fix is already present in the target branch. Momus prerequisite check: \"All 1 patch commits already exist in target branch\". No backport needed." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:23453085-a53d-5788-98eb-0b65dd75314c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a9116c96-71fb-56bc-b6c6-d146c998d32f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a8f239f5-8d95-5868-ab6e-bb6fc8667f74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:997ff61b-786d-54f7-9f07-de8162aa7cb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:41252e84-6397-5c5d-b02f-76490f86f397", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:16c4ac66-cdb8-517c-bac9-de22b726c51b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:893b4323-c703-5b0e-a40c-22b08fc0220f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:cf641a9a-7377-53f1-b655-ac9eee0f793c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a5ace4d9-c7e3-5b4e-89be-922b0e08495f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a94bccc7-3c5a-58b2-b4ca-9363575ba54f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ed8904d0-ef57-5d8a-914c-9b26642349f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:baddd3d9-a541-51dd-a325-4da2f2ff9274", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7644f21b-47b0-541a-b061-71f95f1337ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:4d11e696-b5da-54a2-b574-b0f35481b63d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41842 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:20575cc2-90a8-52d6-97e8-115160573e3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a63f15ed-6d5b-5115-8437-b9fe1112b641", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:75b198eb-de0a-5668-9b8f-0f79aa6f3589", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a19ae280-9edc-5551-92e1-bb76c14e50d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3cf5fc17-fcd8-53fb-aa21-bc8b690e796f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:f46315d2-4b06-53cd-bdae-103eee64e2a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:2cdf7301-d96b-523c-9056-e1a902ccd56b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:e31293ba-1563-5b93-bdda-abc243267849", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:7d5a4894-ea11-573b-8661-ff6ce00fdff5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:ea6c194b-c05a-50c8-b759-1fdc70ef3fc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:5eaf0780-bd92-527c-9ac0-f5fe0a352017", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:a89ed574-3220-5109-b0df-bafdb8ac6f8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:0c2506f0-7110-5c50-a622-b1aca70986b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1778ae71-c109-509f-a26c-e46563eea58c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:79d6232e-c894-5848-86be-951815d92dbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:61ef0a9a-9883-5d62-8736-465e8b9eac42", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:83dd5d05-eac3-511a-9834-8e96558dc13f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:3efce7e9-ddf4-5e67-9fde-304acc32f251", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:6e3c35c0-5205-5b92-afb7-a24d57558a18", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8f1bc97a-6a71-5362-aea5-b61728cd50fc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:202285b3-0c93-5a8d-bebf-ebe72f49b0a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:9242b422-e801-5775-a873-945e2238ef7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:8d1d2e37-f137-50ec-a9d4-73e2d0310ed1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:70817481-2b79-5a64-af11-dff71ea1020d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ], "bom-ref": "urn:uuid:1341d197-eab7-56b8-893a-d407ddf32264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.20-tuxcare.11 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.20-tuxcare.11" } ] }