{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:57651238-dcc2-5da5-a0c3-618ac70b64e0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6", "version": "6.1.7-tuxcare.6", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-38809", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a85168dc-76c3-52ac-92ec-26e81cd39dfc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38816", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:cba6402b-8095-5086-95fd-60c1f9981a14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38816 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38819", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:b8300f87-941b-5ae9-a890-ec62bd886c24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2024-38820", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:f15e3238-f24e-57aa-9af3-e19a59376ecc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-38820 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:5b74d8c2-8421-55ce-acb1-078be7e4e7f7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:10a357aa-2431-5d07-83cd-455740901bd4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41234 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:48587c15-ca34-50b2-bb69-75d3a40e8594", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:bde59f6b-7138-565b-a337-9b03f9534f3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a4e6d2a9-4509-5485-90ac-6d6987e6ffe0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41254 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:ae9ebc00-ae27-5a8d-9e2a-d77770b76023", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:6590ebf1-0c36-5d16-b53b-bde8a5ba2348", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:cd0e4552-16b0-5fd3-b801-7e6d1938c592", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:b7ea9709-ab1e-5e17-a8ac-6529df2f49df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:59699627-45ed-56a6-8bce-ba1dc3794b21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:d30c5b23-be2b-50f0-b571-5a004e59e349", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41838 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a62b7293-8e45-59d6-8b84-c85b8970cbd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:2a3a9453-7b89-5a9c-a4fe-cd689e339da3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:98b849e4-34fb-5f83-b5a5-a3b2963a85e8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41841 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:cc087a55-8d53-51ba-b2aa-e50704af3d34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:19b0efe4-2232-5eba-9b47-b39c372e6467", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41843 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:f178db19-ca5d-5147-8187-f974fdefac94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:41a5a472-209d-5135-b694-13eda57c0d9c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:102b90fc-bd7d-5085-831f-f604ae192ac0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:56b2daf5-6a79-5895-93e6-ae3847ae7554", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:134c7a9d-9f0b-580d-9be9-ba61b0e9211b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:60e3f266-254b-5e27-bea9-4bda2bce48fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:419018b5-8b9d-54b9-9cdb-398fd9c1215e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:253a67e4-65e1-582b-8f6f-163e729e507a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a8319b24-5ba1-5256-820f-ef16aa966f6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:ccd4a3fe-c8b4-53c2-99fa-520d1d9f653c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:1f34afec-ff04-54c1-91ae-0f088841d36b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:048278ad-3abe-539e-9512-148594072b56", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:1e5bfa8d-cb8c-526c-b477-6c006135ad90", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a4fbc981-db36-579c-b3f2-3e6bd8d28cfc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:63a7f477-18c4-5662-ae2e-aaf44bf75a7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:f8cce7b2-c538-50fc-8e1f-dbc10e61d682", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:fca47394-3b6b-50e6-80d1-63babf64b264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:f6def64f-488e-52a2-acf2-8d195124768e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:1d12972c-2484-57a6-a022-94fab6fc5adb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:67da658b-f85c-52dc-9648-a2a578db7d6f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:4e6839ad-b525-5a23-90fd-766d9eb019e8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:cf745aac-fc51-5ce4-a434-ce76bd5946ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:1d9c21c3-8a16-55c1-9595-eee07f977ca8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ], "bom-ref": "urn:uuid:a8d2f410-95cb-5323-af35-486b1dd6a42e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.1.7-tuxcare.6 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.1.7-tuxcare.6" } ] }