{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ef23e8ef-7d8a-5bde-ace2-d2680cd28f0f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5",
      "type": "library",
      "group": "org.springframework",
      "name": "spring-expression",
      "version": "5.3.25-tuxcare.5",
      "purl": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d3748288-80e9-53e7-9925-fff5810ddbc5",
      "id": "CVE-2016-1000027",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-1000027 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d1a39a0-493b-5161-b2cb-add4e8650151",
      "id": "CVE-2023-20860",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20860 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08472d41-e625-5a9a-9d28-f568557d6427",
      "id": "CVE-2023-20861",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c4f3678-6552-5ed2-9386-53e965386bf9",
      "id": "CVE-2023-20863",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa23b651-d814-5b74-9ce0-87fdcfe83baf",
      "id": "CVE-2024-22243",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22243 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d40c7edb-e9c8-5506-98e1-e3822fa9dfdd",
      "id": "CVE-2024-22259",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22259 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef9f7a6b-1e69-5021-9209-1697fc9d02b6",
      "id": "CVE-2024-22262",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-22262 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96498b44-02a2-5cf1-a4fa-b417d5be746d",
      "id": "CVE-2024-38808",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1053d2d6-b1d4-5e6a-bb68-603f25a070a1",
      "id": "CVE-2024-38809",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38809 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81724d5e-765a-5978-9614-e50f7b94c5a6",
      "id": "CVE-2024-38816",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38816 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8055f86a-8ad8-5139-bb65-c10f15781144",
      "id": "CVE-2024-38819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38819 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ff995d7-cadf-5f86-aaca-1b3dfd36a05c",
      "id": "CVE-2024-38820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38820 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd6efacf-7a4a-533c-8c7e-f54007686788",
      "id": "CVE-2024-38828",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38828 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82ba58b4-64c5-570a-bce2-135f47fc03fe",
      "id": "CVE-2025-22233",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-22233 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fac3b998-f858-5033-bf46-4123047f5f20",
      "id": "CVE-2025-41242",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41242 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:998bea1d-552e-502b-be08-3797f64e6813",
      "id": "CVE-2025-41249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41249 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:651cb517-3be5-5c4f-bbe6-fae10a905c6e",
      "id": "CVE-2025-41254",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-41254 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7f3782c-d77a-5a35-b26b-44a8888b1c0e",
      "id": "CVE-2026-22735",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22735 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c724a87-6100-53f4-a7f6-77f9cc9a1d6d",
      "id": "CVE-2026-22737",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-22737 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6193b7fc-d8b6-5f90-b8d9-88203a01840a",
      "id": "CVE-2026-22740",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22740 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7c59b92-3fbb-547b-8a03-159adba4b61e",
      "id": "CVE-2026-22741",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22741 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7878cbf6-ba2e-5621-aa61-fd426f793f38",
      "id": "CVE-2026-22745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-22745 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:632c5237-7fe4-55e8-a89a-3f2a31118da0",
      "id": "CVE-2026-41838",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41838 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af1a8a83-148c-5504-8eda-148134de2da3",
      "id": "CVE-2026-41839",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41839 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0271d6a-f725-584b-b412-d69aa38efcfe",
      "id": "CVE-2026-41840",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41840 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22f80bf1-bbc4-5eb3-933d-eaa9520cb833",
      "id": "CVE-2026-41841",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41841 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:850ad86a-c98c-5104-b40b-545c2a39c907",
      "id": "CVE-2026-41842",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41842 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2541865f-83b3-5f98-b6c7-cd06869fc184",
      "id": "CVE-2026-41843",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41843 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92605565-3bc5-532c-826e-13b7335cef07",
      "id": "CVE-2026-41844",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41844 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ea1b9ab-201b-5233-a806-e9cd58c0fe41",
      "id": "CVE-2026-41845",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41845 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3255f514-c2df-5e03-9a14-a50fe1f39bfd",
      "id": "CVE-2026-41846",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41846 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:239b335a-c679-5507-bf23-f3565c516b06",
      "id": "CVE-2026-41847",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-41847 does not affect version 5.3.25-tuxcare.5 of org.springframework:spring-expression. All 1 patch commits already exist in target branch"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e90e14d7-07fc-54a4-b817-dbd73a3ca5e0",
      "id": "CVE-2026-41848",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41848 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9fda45fb-2661-59ee-a3b5-60cfc49817f5",
      "id": "CVE-2026-41849",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41849 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb2f9f5c-b2b6-5dca-89df-2248c3b9ab47",
      "id": "CVE-2026-41850",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41850 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73969575-0034-557c-ab78-8edb39f81202",
      "id": "CVE-2026-41851",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1fb8fb9f-daac-576f-962e-f39ccb862e00",
      "id": "CVE-2026-41852",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41852 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08c16ba6-56b6-5279-8aa7-8c3e3cf4a754",
      "id": "CVE-2026-41853",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41853 is fixed in version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a4f5d89-9657-5b79-a868-3969e4499394",
      "id": "CVE-2026-41855",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41855 affects version 5.3.25-tuxcare.5 of org.springframework:spring-expression."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.3.25-tuxcare.5"
    }
  ]
}