{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:65234e74-9cf0-51fa-afff-88ce86db59b0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.25-tuxcare.4",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f44ce9e9-58ca-5905-8ba1-07fb3e72d38a",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5970a1e2-f78b-531f-b058-cb5c8e571def",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e208b1c-e4f2-5f54-899c-508e9876c0bd",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e8dee1f-e435-57c0-8100-b15f6fa8f9f1",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ea9463d-e217-5d1f-8d2b-5f5468267c4a",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d44195c4-51c2-5008-a8cb-bde007839dbc",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:393273f9-d1ca-5a05-a113-09b5866dba53",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c0aca3d-d3b4-5e27-a7c2-ab89cefa4783",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4bf531c7-8386-5c2e-b360-b65083a6ee4a",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2062e0c9-0fcb-57cc-b3fa-b67c43418072",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f9bc103-7346-5f26-8959-a869193b94df",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ecb1067-5b7c-572c-abf1-54b83a5b57eb",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:896ca56d-72b3-5927-b687-53a655935ac4",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:779e2eed-1acc-5890-a692-b054b585ad68",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39b9eb37-5cf8-5479-b04b-78ca44bf0ac3",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cca79c86-6c51-5aa6-b5f5-d48104da1b7e",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaa890fe-f776-579c-8e90-73b19307d546",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec7a90c4-3fdb-54e8-9457-9b2e3156f8e2",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e4c98c13-8388-58b3-bfbd-ccfc84f3a68b",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99ba1574-eac6-5c44-a545-4cb21f96c0be",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50d1f0b0-68a3-5e79-8368-51fbf765d018",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68958422-fcd2-5b63-bd50-fd1a7021f8c0",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d56ed238-96dc-500b-b5a8-faa7fcfa9932",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddfc3a99-2292-577b-90a4-4b81b6dab40c",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:504e55a8-4840-5ebe-9455-c85c9a23c8c2",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7b1329c-5fef-57ba-9427-c5a252fd76c6",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41841 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a15ebab5-8ae7-586c-a2f3-9194984e9e61",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41842 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efe3a535-62b5-5618-bba6-82be628f8fec",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d4f832a-67aa-52ce-96bf-4f15b3a9fcc3",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:583fca8e-390c-56c6-8452-b381bbd9db5c",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cd61cc4-bbab-5bc9-8fbe-ffb2c340fde5",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41846 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41fadfd9-d731-5195-b3a3-1f9e5a343029",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.4 of org.springframework:spring-expression. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bf14b99-8392-5b8b-af4d-b9d6f3b40f0f",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c7e0169-ae2e-54db-8b06-1dec7bd29c42",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2570d365-8ad7-526b-b21c-3e79027a6039",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21c5841d-35ac-5090-9fd2-7f8b9f48fc30",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51cb9a4d-cfeb-5234-9fde-76f4d97ff620",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93c840d3-d7df-5402-8e71-6c2cb7af4b3b",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a85022d-af60-5331-83e3-ae5525f0db71",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.4 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.4"
    }
  ]
}