{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5df070f7-82b4-53c6-99ab-82ed4cc73e4c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.24-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:da7ee39f-dfb9-53d5-86b8-cab7ed076fee",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0cdc73f-f2d8-5fc9-82ab-7d338dc630aa",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbfd57b1-9f0b-53ed-8f69-e0d12cc16e9a",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f55dc5f9-4876-5afa-83a8-d194e4fb3787",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6aad10d3-3eae-5a0f-b823-491d5e879551",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0cf29e2-049f-53ab-b456-b47b1006e979",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c1988f5-194b-5c08-8578-90da96d41e4d",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df4118df-80fd-5742-80a0-ca91b50477a6",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7707975-34ec-5d28-b891-cb3454c7b1eb",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee6c2270-8f82-578b-aabe-6beb0dbf448b",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5aa1d57-61c2-5254-97d0-3bf54e67caba",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24bb504c-c644-564e-b4ba-5c1695fb0c80",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e159b1f-b487-5247-85ff-45cc830fd51f",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b743d5ad-c9ed-58b9-b69f-71c0f65b7cfa",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37d34559-14b3-5b63-95b6-717082379463",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40e7a253-0528-5239-abbf-54a4f774d1fb",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4972377-ee7a-51aa-8c8c-e6187b16b80d",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77c647c8-3262-59c4-936c-63405a69ac14",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61b5893d-932a-5bec-b76a-a8fd33cab756",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6cdaf67b-c768-5ae4-bf85-f23f40020fa8",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:646f716a-1207-59f2-af11-54c01c9695df",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e250efa-9e8f-5e90-8f84-9eb81bd430fb",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9434d887-be76-58c4-b7d2-dc7e323f9412",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b328018-6e6c-53e6-8182-855986a864a8",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41839 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0cc01ce-0b41-53c6-aca2-a5782f49a046",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41840 does not affect version 5.3.24-tuxcare.4 of org.springframework:spring-expression. Patches already applied: 7052da453285658215efc1dd5ecb0d472fde2de1 (already in target via 2c11852775 'Backport CVE-2026-22740 to 5.3.24')"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b7c9681-55cb-5592-b66f-6ce5f4631d4a",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81afd305-33f4-5ce7-93fc-6c838587c08d",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ed1406-971d-590e-b1f8-61a352c3058e",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c10d2117-1a67-56ad-be9e-b14ec1a2da45",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be84db5e-785b-5558-a682-fc75675dc0f8",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fab4c4a-9bc0-58af-93ba-8234337423f5",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98fa06b3-c0dc-51e1-9365-92ec84b5d75b",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41847 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9300fc9-081c-57f2-91f9-4edcdf264658",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b99c75b-f9fb-5037-85c6-25304c4c78d3",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e0dff27-aeef-5354-a7d6-7460169d55ff",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8011038-6a12-50d3-9a4f-379514f87857",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d24ff2f6-0a58-5042-b21c-b4b16e55eb1b",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b4a4f8-ef64-5fe6-95e6-fceb8b6547dc",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41853 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65d37246-30a3-5b81-872f-e1df403352e0",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.24-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.24-tuxcare.4"
    }
  ]
}