{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:798c33cd-e2e3-5c17-8401-54cda571abad",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3",
      "version": "4.1.9.RELEASE-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "4.1.9.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:240fd0c1-a374-59d4-89bb-222209cc2a9c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:dbb1ce87-08e8-533b-993c-825b186c5855",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:bcee59fe-e254-5864-9a86-862d035d3e2e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6bced3e7-2524-5af1-a2ed-9fa69add9c3b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a566bbf9-d5ed-5b50-872a-b8be9e62877c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:952be8f9-e35b-55a6-9b4b-5a554f0371c2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:2df3dd95-9511-57f5-9d3e-e928cf1ec94d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8feea5bb-72f9-5c82-8040-925c38189f44",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3566a755-ad62-5403-8e01-2cff36da295d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:4948d1ac-67a2-567c-a459-f5614d8d4c7c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 4.1.9.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@4.1.9.RELEASE-tuxcare.3"
    }
  ]
}