{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5f1a04fa-0a7b-5a3c-b178-646460601821",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-servlet-api",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@7.0.109-tuxcare.5",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@7.0.109-tuxcare.5",
      "version": "7.0.109-tuxcare.5",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-servlet-api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@7.0.109",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "7.0.109"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2001-0590",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@7.0.109-tuxcare.5"
        }
      ],
      "bom-ref": "urn:uuid:655af605-d40d-52f2-8eac-27f3ebee1fd2",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2001-0590 does not affect version 7.0.109-tuxcare.5 of org.apache.tomcat:tomcat-servlet-api. not_affected \u2014 CVE-2001-0590 affects Apache Tomcat versions prior to 3.2.2 (circa 2001), allowing malformed HTTP requests without protocol specification to bypass JSP compilation and expose source code. The target version 7.0.109 (released April 2021) is 20 years newer than the fixed version. Analysis confirms the vulnerable code pattern is not present. HTTP/0.9 requests are properly handled through the servl...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@7.0.109-tuxcare.5"
    }
  ]
}