{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:835930be-c319-58d6-b1fa-08c8cee350f0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "spring-expression", "purl": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1", "type": "library", "group": "org.springframework", "bom-ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1", "version": "6.2.3-tuxcare.1", "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2025-22233", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:d5ed7269-08e7-53f2-aa71-c3becf5f21f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-22233 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41234", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:a7d536cf-cb09-5b6b-899d-3589fa789e39", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41234 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41242", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:581e604c-9556-59a2-8d16-2a8bd021dfc0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41242 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41249", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:9250a29d-0958-5ce9-9e4f-ba5d22ce7d76", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-41249 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2025-41254", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:df440a4a-3f9e-50bc-a897-1807620131d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22735", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:0dfc8a58-4022-5368-93a7-0c654748ac39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22735 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22737", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:028fe939-0153-59fb-a41b-0775fd11402d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22737 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22740", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:76b37af1-7649-53b2-b6c4-ee24c119ca42", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-22740 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22741", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:1bf64c03-8beb-58c8-a36e-1e76491f749f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22741 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-22745", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:dcb30012-3082-5254-b7b3-54ff0ba14e65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22745 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41838", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ecbd0556-2323-57fe-9809-0ec534326418", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41838 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41839", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:85bf3269-5eea-5d69-b608-b44d1c605cbd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41839 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41840", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:fc5a2475-43e8-5503-86bd-adb0e02c6537", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41840 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41841", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:8a0c1cb7-beae-5cf0-a947-37f4ab9163c5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41841 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41842", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:09381d60-9df8-5c19-a468-d5da405f8aff", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41842 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41843", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:bbaeef74-8583-5e85-a784-dece44edb098", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41843 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41844", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:af260e16-9818-56fb-a17f-beda009d73d7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41844 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41845", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3a5bdd96-1517-5f57-96d1-49c6f7dfd608", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41845 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41846", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:53df8c6b-695d-5570-b745-4e19a44fb196", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41846 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41848", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e7e427fd-297f-5513-9172-38ac810a1dcb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41848 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41850", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:c0d8774d-22af-5c69-a2b4-0f00790b05cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41850 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41851", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:c491ce2f-d1c6-50f8-a6af-a23240a1d6fd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41851 affects version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41852", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:6fa31b2f-4ff9-57c5-b0cc-f7bc9063ae91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41852 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41853", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:bd2cf98b-e6f5-5b97-bd07-de4d4df1ed45", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41853 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41854", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:3079808b-d547-5cdb-a9a3-b21f6799acd1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41854 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-41855", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:7d9aabda-d46a-51b7-9243-3dea544cff7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41855 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47883", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:2e4eaa48-ca03-5d83-8287-7907ef99c433", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47883 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47884", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:174faebe-96d6-526e-8bd2-9a901e58de8f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47884 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47885", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e2bf51b7-3c11-5469-86b9-ebeeed9a7d21", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47885 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47886", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:e448d831-b43d-5045-98d6-74b337935974", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47886 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47887", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:de06f2a7-db82-51d0-9de0-4f840993c541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47887 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47888", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:879bfce7-ca52-5fd2-acf3-3619eb01e130", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47888 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47889", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:05647c37-873c-5885-8076-15c57e0fb5e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47889 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47890", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:5f498990-f1a3-533f-a182-82afa53a5ca8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47890 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47891", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:52e08911-4187-5a7d-be8f-f5ffefd2bd66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47891 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47892", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:4efa8ca1-8f28-5032-a4af-d8c22cd47b7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47892 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-47893", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f0188558-eb93-577c-b8ac-38a43a9c76c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-47893 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59280", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:b6c987fd-0c37-55ac-abd8-6f88f3c320ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59280 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59281", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:23e45385-efb9-5611-9798-efbb69c05ca5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59281 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59282", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:c0d11a09-c0c1-5dda-8f87-c42c121fa95c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59282 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59283", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:ab9ebe44-e944-5716-8a43-43a9c6293bb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59283 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59313", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:283243c7-a6bc-58fa-b708-05ad08299100", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59313 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } }, { "id": "CVE-2026-59314", "affects": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ], "bom-ref": "urn:uuid:f4c81f45-3edb-5455-945d-82e9e8fa77c0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-59314 is fixed in version 6.2.3-tuxcare.1 of org.springframework:spring-expression." } } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-expression@6.2.3-tuxcare.1" } ] }