{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:2d608ba6-c2c5-5f9b-bd51-049ec4fcafde",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-servlet-api",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.75-tuxcare.7",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.75-tuxcare.7",
      "version": "9.0.75-tuxcare.7",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-servlet-api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.75",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "9.0.75"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2001-0590",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.75-tuxcare.7"
        }
      ],
      "bom-ref": "urn:uuid:94badf9e-048f-5147-b891-5aa413029728",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2001-0590 does not affect version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-servlet-api. not_affected \u2014 CVE-2001-0590 affected Apache Tomcat versions prior to 3.2.2 (released ~2001) where malformed HTTP requests without protocol specification caused JSP files to be served as source code instead of being executed. The target version 9.0.75 (released 2023) is not affected because the fix was applied by Apache over 20 years ago. While 9.0.75 does accept HTTP/0.9 requests (GET only, per Http11Process...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@9.0.75-tuxcare.7"
    }
  ]
}