{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:8bd2b2ca-bf3b-552d-8984-cba123fcff16",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2",
      "type": "library",
      "group": "org.apache.tomcat.embed",
      "name": "tomcat-embed-el",
      "version": "9.0.83-tuxcare.2",
      "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:888dba5f-ec72-5bc8-b0c6-51facd5b7cc1",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da205805-255b-5ba8-84cf-f47de473b272",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55762761-4d7c-5a47-bf3c-8c26d17c2ce1",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23672 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08a8bf66-8460-5926-a04b-31e331e10073",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bae3d12-ca2a-526f-a880-4b1824097d11",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9eb9146-3a1e-5c8b-bed0-c155e4153bdf",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c6dad5-50eb-57ff-a4aa-5dce55636c83",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7501878-f443-5d52-8f88-20864565fe6f",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8825ba7-a5b0-561a-9242-fdb9ed22c2af",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ddb0042-720c-5c88-9fec-9245821c813c",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e21d0dd5-a415-52b4-9226-83717ff8f435",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d10c88f0-c67b-5064-8e42-3c75d98333ad",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f00d6d79-f435-59d2-bf6f-b66ac8ec584f",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31651 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9be61c72-19a1-5182-87ec-03aff7e1fd2c",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4581f7cc-a461-5b0f-abe0-b5f41c1348a7",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84181746-562e-58fb-8f0e-35c14d0f322d",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d5ed39c-5747-57a3-acca-ec56fbe5a35a",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e5dca16-1200-5904-9abb-ed907e1ec2d9",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acc6999f-48fa-5402-837f-ee3288b0d259",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:91853255-b9bf-5867-b953-755a4c956494",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e400d0de-80b0-5ab4-8c16-e8fa8ab03492",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fdc32100-381e-59f9-afb6-2f0c68d3d0d0",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43a9e191-6f89-5ec0-bf29-a53741971618",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4076d887-369e-5313-bfe5-6ebb99c97d31",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b131b420-8b4f-523f-b18f-e21896b7854b",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8397a60b-428d-505e-8eaf-34ff4a6e5b30",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62aff872-e523-5d1f-a6a9-da7b32d1b2f6",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b803e42d-07f0-5012-bdf4-34f9e840f8d2",
      "id": "CVE-2026-41284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41284 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1f5fced-ade2-586d-ad9e-5c47ca34cb71",
      "id": "CVE-2026-41293",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41293 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c3ead29-84c0-5f60-a580-bc6cf4804fdb",
      "id": "CVE-2026-42498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42498 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b15b25e3-76c1-5ccf-990c-097f53a1cc80",
      "id": "CVE-2026-43512",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:295932d1-90e4-55b5-9c8f-3f969e287373",
      "id": "CVE-2026-43513",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9eef304-f925-5b12-a201-6c61a42c5dcd",
      "id": "CVE-2026-43514",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90debc8a-e9e0-5cc4-9bd2-9e6db0b247c6",
      "id": "CVE-2026-43515",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43515 affects version 9.0.83-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.2"
    }
  ]
}