{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4b131e62-3feb-57ee-87d2-cd9dd5dd6b6d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-juli",
      "version": "9.0.100-tuxcare.6",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c394eb92-7d0f-5a22-8155-3a099887c7a8",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc2f4989-3e6e-5d56-92b2-26865e814161",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cecac41b-09d3-5852-a324-a524c011bfc7",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9e11381-bade-522c-a147-176e6c2723ef",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e98eaee-7b6c-55f0-abf5-ec06640882bc",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c76b25b-0e50-5b4b-ac8b-b75185b59fba",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dfc56d48-cbea-5626-b3e5-8fbf1546b1d7",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f1e0b33-2174-5563-9f27-5d062614cab6",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4b59858-2f62-5945-b6c0-1de948337532",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbb733ad-f28e-5d72-9254-7a6064033c3b",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68ce531f-70d0-5d16-9e69-3563105de532",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-52316 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7fa0b51-faa5-5cd5-b1b6-ad9596b76db4",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d657f347-6eb7-599d-8bb2-419433be3795",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebb02b91-6559-56c3-bf7c-0085febb4463",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b9a3149-f960-5b0d-8bc6-ac4cc76c1c6e",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d5e625-a22b-5e23-bb78-6d994e4d82dc",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a08428c2-0459-5fb7-9fae-98fd8badb7d4",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:41163014-a9c3-5f33-92f2-5fcbdc9c0b35",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:077b37e1-419b-5d3b-9dae-56f0aa40016a",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23fb07a5-f0eb-562d-b365-ffd961b4e76d",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0462e783-e8ef-5bde-bc34-8525fac88bf2",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0d79ab1-dcf4-5f77-af88-851c8d22d554",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46a1e857-2b55-527d-a3be-61e5fc25107b",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:702996c4-84fd-531d-9262-a7edf520db3c",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc74f9b5-bc94-53dd-b80c-5de0534c0759",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78fede30-3d46-5162-b567-2e8c7f961469",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02340282-41f0-54ad-b418-6316827abcdf",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6ad972b-4d21-51b6-8b9d-3b7ed138cefc",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bca8128a-d778-51ea-8e7b-c1ee5cb4a555",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24880 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ce4cde0-2b7e-5b20-a983-3cc5c115526c",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13923808-5918-56ca-9ed0-736293a5333f",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29145 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bedeecee-88fa-5925-93ed-97d7d01dac68",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2323730-4fe5-521b-82d5-23b931ec07d2",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fac9803d-1f39-570b-b2ea-d3921ac802e2",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34483 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ca82071-02d5-5d91-8c9d-c99b47d7f753",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34486 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d91c56fe-679a-5b5e-82f1-445a8a3fe70a",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:373ee59e-28fe-59f9-9720-858eb068728c",
      "id": "CVE-2026-34500",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34500 affects version 9.0.100-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.100-tuxcare.6"
    }
  ]
}