{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:37506b16-753d-5924-a9d7-54ec7982341c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-el-api",
      "version": "8.5.100-tuxcare.10",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:48dd7940-5822-5f5b-b577-f2c38cfcb4ff",
      "id": "CVE-2016-0762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0762 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff91050d-1528-506f-ae6b-0ef9421a07a7",
      "id": "CVE-2016-0763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0763 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48023fdc-9b73-523f-859b-c4b40358fbc4",
      "id": "CVE-2016-5018",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5018 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:055712d7-18bd-5f62-be56-fdf64253abc0",
      "id": "CVE-2016-6794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6794 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28ea7e72-85da-57db-aa23-7986188bf67f",
      "id": "CVE-2016-6796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6796 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82572bf5-0c93-5740-91c6-eaaccada85d2",
      "id": "CVE-2016-6797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6797 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc590fd8-ac35-50a7-8495-6277f7011ae3",
      "id": "CVE-2016-6816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6816 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e365acf4-8e06-54d4-a2ea-3a148489bbec",
      "id": "CVE-2016-6817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6817 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d172d9b-1034-5211-942a-065e90725fe8",
      "id": "CVE-2016-8745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8745 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6783ee5b-b947-5a3e-8caa-97ca140f81a6",
      "id": "CVE-2016-8747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8747 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b429a528-c77f-5019-a7b3-85635708c4b7",
      "id": "CVE-2017-12617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12617 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb7f14a4-cc33-5547-aedb-5484ee26adf7",
      "id": "CVE-2017-5647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5647 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4349bae9-961c-5237-b09c-9d153b9242eb",
      "id": "CVE-2017-5648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5648 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47279b24-2e34-545a-b539-9eef16543bb0",
      "id": "CVE-2017-5650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5650 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12b1772b-5e00-5a9b-a260-dc46d1da034a",
      "id": "CVE-2017-5651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5651 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5588993-5456-56f1-8e65-15cc655a362a",
      "id": "CVE-2017-5664",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5664 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73922e8c-c297-5f63-a995-8f8daf3a25cf",
      "id": "CVE-2017-7674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7674 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5827acf-6195-55e0-87bc-1bc9a7b3fdaa",
      "id": "CVE-2017-7675",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7675 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18d43673-37b3-567a-a944-0b1da8943956",
      "id": "CVE-2018-1304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1304 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a81d83e8-f2f4-52a7-946f-09755967200b",
      "id": "CVE-2018-1305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1305 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:298a302a-42f2-515b-ba96-e01f0137fac9",
      "id": "CVE-2018-1336",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1336 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea940cbc-3bd8-5b4a-83eb-275887969431",
      "id": "CVE-2018-8014",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-8014 does not affect version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api. Tomcat Version 8.5.100 is not vulnerable to CVE-2018-8014. Confirmed by manual code inspection and security advisories."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:110ed959-3406-5dca-abc8-97008f1bfce4",
      "id": "CVE-2018-8034",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2018-8034 does not affect version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api. Tomcat Version 8.5.100 is not vulnerable to CVE-2018-8034. Confirmed by manual code inspection and security advisories."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59669fa4-9b30-5085-a8ca-42cd6df895f0",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3b5c130-92ed-525d-8879-4ed6b8b23a7a",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b884f3c2-31d4-59dd-826c-0972d7fa0059",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:200f20b3-4514-5623-bd59-c2c1d6c65f70",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat-el-api 8.5.100-tuxcare.10."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:080d811b-7c46-5711-906b-3e7425b6b127",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fb5fd11-b968-5492-aed9-41b30326ff7b",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:679859b4-e69b-5d37-a25c-80e624450e3f",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60ee8c99-28a4-58c4-b407-63ae580b378b",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a5e6f33-0468-543e-83c9-2a5f18e1f705",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41b10da2-e401-521b-bb2b-54a57e3d7ee6",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8b9bfaa-4c29-58ea-bf2d-fdda3f064b8e",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ad7c67c-0878-51fe-940f-d745436f5e4f",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94d7a170-e312-5af1-86d5-425a137f2c32",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32cd0034-1ee8-5ede-b67a-406d693dfc0e",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eae0725-2076-516a-92e7-6526671ee323",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94139521-2644-5d72-8e6e-96ca07456bdd",
      "id": "CVE-2024-52317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52317 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1babba2d-cd7a-5240-b189-112acd8cdbc4",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a5df6c2-3e38-56ee-88ed-dd76fe65b50b",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6abb9281-fffd-5588-b51a-561cbb0f6507",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a2f6225-6947-5643-80ce-09e946ca822a",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8d47322-90f1-5058-a14b-9b77fdbe597c",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3e3b01c-0319-5b7a-8d49-f1e9ccb5987d",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74d84c20-6524-56db-84f2-409e6e86288f",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0bfb24e-cc17-5baa-b93a-eb4b88e25b66",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d845db2e-ac14-5801-9ff1-e0f6edfe869f",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cccc828-b9fa-5045-ac6c-c5094e0ffc74",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92c46820-6b8f-5a9a-806c-fad7a958f684",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f40ee7f-c1ee-542c-8c78-7ff1f851da68",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2da264bb-7e65-56b5-a524-e33269599fb6",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0c1f7a9-6b6d-5525-bcf7-e60cce7e314a",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9813bb64-3ebc-5f3c-ac60-06f0c3e46ce7",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:230d2da1-7d7b-5e3e-a070-6964f2290890",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa795b77-2b95-575b-a857-c23db94d6c9e",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b70cd0b8-bb51-5455-8b68-41816b3821e7",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24880 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c4db7a7-48ab-5a99-90ff-cc2f09996207",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9454a9c4-f23c-5388-ba82-b59a6a5920fd",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31be439b-d739-5499-8d00-c725f485f76a",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc3cba73-2427-58da-a6d9-5b3ae2b9d182",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34486 affects version 8.5.100-tuxcare.10 of org.apache.tomcat:tomcat-el-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@8.5.100-tuxcare.10"
    }
  ]
}