{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b1927be6-b1e6-5604-b113-c2f41e4aae5e",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "spring-expression",
      "purl": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3",
      "type": "library",
      "group": "org.springframework",
      "bom-ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3",
      "version": "5.2.10.RELEASE-tuxcare.3",
      "pedigree": {
        "ancestors": [
          {
            "name": "spring-expression",
            "purl": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE",
            "type": "library",
            "group": "org.springframework",
            "version": "5.2.10.RELEASE"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2022-22950",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6bee8f5d-9640-599a-a4ba-7c578cb86dad",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-22950 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20861",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7d1ccda0-b990-5cc4-8553-fefedae73f71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20861 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2023-20863",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:6bdf447c-bb9c-5af4-a5d7-41e67d030b49",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-20863 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2024-38808",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:7ebfc596-2575-57ca-be03-4e3b5ca4517c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38808 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41849",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:48e5c86d-8028-5eb0-a68e-1d54cf9f8160",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41849 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41850",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:3c081588-2322-5909-ac1c-72b61cff0d51",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41850 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41851",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:8e384fc0-6c71-547f-a2de-f1bb1937def7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41851 affects version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-41852",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:a0f5c5c0-8dd1-5968-a6cc-4a9d4a55974e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41852 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-47886",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:ff24da97-2af4-5eb1-9090-d9d2ef0f480a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47886 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    },
    {
      "id": "CVE-2026-59283",
      "affects": [
        {
          "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
        }
      ],
      "bom-ref": "urn:uuid:514c596e-76f8-5b17-914d-5860bbb278a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59283 is fixed in version 5.2.10.RELEASE-tuxcare.3 of org.springframework:spring-expression."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.springframework/spring-expression@5.2.10.RELEASE-tuxcare.3"
    }
  ]
}