{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6bc5b15f-6058-5e3d-97ab-4a47c9a8c7d6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1",
      "version": "6.2.14-tuxcare.1",
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-22735",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e8ffcd3f-9a38-5d57-b822-291d770ddb31",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22737",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5496956b-d031-5969-9195-bae4dbd56752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22740",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:68c7374f-b9c2-55d3-9cfd-6ee2f10e0f86",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22741",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b75b063b-ce77-54d0-817e-d4ea8016861d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-22745",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:966add42-782f-5dc0-bc5f-9a2301d73728",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41838",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0eb2ab15-3479-588e-96da-8e902d6a92db",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41838 affects version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41839",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:268c8df7-c218-50ca-8b35-0ac2410fedc3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41840",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:5817d0ae-c2b7-5b4d-b3bf-456a87b66564",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41840 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41841",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e448c3b4-55ba-5fe3-b70b-834c54b40bb6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41842",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:62b586d3-86fe-55fa-a68a-774065a9b022",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41843",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:4edd806c-ac40-5d1d-8e79-61a6fad8fd09",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41844",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0b5547e-dc06-52bc-a68b-eed6c69ffd5e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41845",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:89d5e4ca-2819-52f7-9e1a-8dabc4b9d19f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41846",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3042cda6-f2e2-5483-9980-32fc9756d7a7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41848",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ab41a9ec-76e5-550b-ac38-6369a08849c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41848 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:841eeac0-0ccc-5336-b9ab-17bfe2b8c9d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a0d4fa61-fca2-5603-9bd9-5cadf94ce6c1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:3f9b61cf-88f4-5d50-8500-5cf9584e2567",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41853",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:69a598ae-a516-5a87-86c6-545d17762a8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41854",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:fc180858-b9c1-53a2-8d49-b99524a25947",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41854 affects version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41855",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:626a0639-368d-56e5-ada2-a286b30ca6dd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47883",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dba90524-9602-5a5c-ba19-4ed5c3d5043b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47884",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:58520b98-2b23-557d-b9bf-a6e2aca950c8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47885",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:11210e91-4f36-5fb4-b1f0-b03923abd02c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d22e061d-84de-5208-8dc8-b4f790a0c2d9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47887",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c59cbb84-f5f0-5aba-8963-ceffe356f44a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47888",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:51fdfadb-8a1a-53da-b11d-29b6b89e190e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47889",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a356a3d6-f5b6-5608-9734-c29ca961b0bd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47890",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:416ac182-d7d1-50ab-ae02-0debadacaf4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47891",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9228616a-10cc-56b5-99fb-dfb0d83cce23",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47892",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a2033f2f-6395-5e81-b3fd-e15c7b26f2c5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47893",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec1c30b2-c59f-5a82-b2a4-f6949d410bda",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59280",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:03ba77a8-c8ce-5a10-913b-dce9e835f365",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59281",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f35fbaca-e3e3-55e2-a771-f7a1db07b6e5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59282",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:df71edb4-77e0-54c0-bbc2-9ee2b19c0442",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dbe172d0-e814-5514-9305-db7239f18b62",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59313",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e32dec6a-dadc-54a8-98d8-58a1946a8ce9",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59314",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:30e701a5-4279-569d-bcee-3669c02d6b51",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.14-tuxcare.1 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@6.2.14-tuxcare.1"
    }
  ]
}