{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9993042b-fdea-524d-a10c-a0e21dfa7750", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6", "version": "6.1.4-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-22259", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d220584a-9281-5b67-9857-1263391d6b02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-22262", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b9232ddc-65a4-56b4-a918-2083935f16f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-22262 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ca38f8ee-97c5-5619-85d0-8ecd83f42ee6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:f3a37f09-3443-51b1-98c3-e49509747949", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:4952ccab-fab2-5915-be7b-af537481a663", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d5638c53-04ab-5e53-abcf-e9010084711b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a97f5eca-16c6-50b4-ae9c-3321c0373ceb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:64d94163-cb69-5f6a-842b-c6302a277a21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:65be3465-fe46-5e7e-83eb-6b929ead9006", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:839c628f-76b0-507c-ba2f-089f837a4189", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9341497a-73d6-5dfc-88b7-3b873f8fd664", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:bb97925c-80ec-5575-bb48-808dcaa0dbce", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:4ac4a7a7-0cae-5bbc-8797-71ab4667c4d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a34b2d9f-aac4-5a9a-8371-6f04bc100784", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fc684b9d-a092-5701-a9dc-c4e6eeb99b23", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:425d8991-c2de-5151-b594-3a29ccce08f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:14ec03b9-e827-56a2-9971-5bbcac740524", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a251b181-d4ba-5ed5-a52d-491202ff9303", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e1d6ecbb-3462-56ef-83b5-c1f050eeb761", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:0b13ddb5-995d-5ab3-a0d8-2c04e97a966b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fd19b5b7-45d5-5aa1-959b-83bfa0009d29", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:543da60e-19ff-5c20-afe3-6029d602b661", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:b3fcf65c-4996-5957-9bf8-540472fa9836", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:cd4771d4-c748-57f4-99a7-f4f5e776da66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:53d58036-98df-5af9-a39a-63c4f5d1bfef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3257ab12-6262-5ea7-80f2-cc4cdff41907", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3ebaa754-1d7e-5b8a-9219-9545c8cfad27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1638900a-aaec-5d0b-a81d-82bd18d4141e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c002f5bf-0115-56f1-95b5-1afe16b92aee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:c30d02a2-25f8-5558-a145-59d24bd3ffad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:fe69e3c9-4e2d-5001-97cc-b5204b5c7f30", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:ee675940-9830-59e9-ac41-7ac390144e55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:dc94b24f-1856-53de-b5e9-f829d84cbd6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:3c5f55ab-6707-5684-ba78-177e9344167f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:cf514ff4-a122-55f1-b946-2ed4f7886f02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d2e66a77-b23c-5e11-89fb-5c0c7e1506cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:9d6f9d66-47f5-5b50-862b-29ff451bb48d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:04c887d1-d80c-556b-8cb2-443b1450446f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:a81fef03-8ae2-51fc-aa21-9f7137d1ef9e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:1e85beb1-86ef-5f1c-9556-d6ba74fe1058", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:312f1017-e65d-533d-b702-717a2fbb4462", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:5ee472f2-fc7b-5e96-b905-8ecab3b9aca4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:70b0907d-5d21-5e68-89da-605cef219f05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:7346ff06-6e03-583c-8d10-87fd071ef13e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:e72723c6-5f34-5b5a-b27d-79b51d654f15", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ], "bom-ref": "urn:uuid:d3cde733-183a-51d8-9702-8d91869f3bac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.4-tuxcare.6 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.4-tuxcare.6" } ] }