{
  "@id": "urn:uuid:995c5d32-bf82-4931-af40-786ac240210d",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T03:17:00.061894+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@8.5.100-tuxcare.5",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api@8.5.100-tuxcare.5"
          }
        }
      ],
      "timestamp": "2026-11-04T03:17:00.061894+00:00",
      "status_notes": "Vulnerability CVE-2001-0590 does not affect version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-servlet-api. not_affected \u2014 CVE-2001-0590 affects Apache Tomcat prior to 3.2.2 (2001) where malformed HTTP requests without protocol specification could expose JSP source code. The target version 8.5.100 is not affected. The vulnerable pattern\u2014serving JSP files as static content when receiving malformed requests\u2014does not exist in modern Tomcat due to architectural protections: (1) HTTP/0.9 requests are properly parsed and...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2001-0590"
      },
      "impact_statement": "not_affected \u2014 CVE-2001-0590 affects Apache Tomcat prior to 3.2.2 (2001) where malformed HTTP requests without protocol specification could expose JSP source code. The target version 8.5.100 is not affected. The vulnerable pattern\u2014serving JSP files as static content when receiving malformed requests\u2014does not exist in modern Tomcat due to architectural protections: (1) HTTP/0.9 requests are properly parsed and..."
    }
  ]
}