{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b2acb805-8fa9-5b18-91c6-b8bbed8dea0f",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-ssi",
      "version": "10.1.18-tuxcare.5",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1b9aca4d-3b63-5e96-bbd0-8c032efbc7ef",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a4b0ea3-7604-5c4a-b67f-3b3dca930a1c",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c807e27b-9e1d-5ace-b2a9-0ad5d4751b0a",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d426fd5-4548-536e-99b1-d6d4e85af719",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4796daa4-e8cc-51cc-93a1-88a277ce9157",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71a8cfb3-be2a-52d5-80ee-18229b68c6ae",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97b28c69-1d8a-5fc9-92d4-2af0d227eaa8",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7bd094a-d2e2-51db-95e1-279296b1e0ed",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed387d79-dafe-5e3e-b639-6bb38894eb62",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b79c439a-f9b6-5a1e-a9e6-edafb70746a7",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d86c9d2-a354-567e-87ef-bf8a78843dbd",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcf01365-953f-5737-bdf4-35ee6a0f9aca",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c36458c-2965-5fb0-baf5-837513fe99ad",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74dccae9-f75a-5b70-8762-3edbb32f8f37",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09831629-c0df-5049-af74-d0dc43471d64",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02e36f8c-9724-5a39-aaa9-ed64a6c7ae88",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6be27f58-8802-51f9-916d-09a1899ca0f5",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4eeff813-1be8-52f9-a4f2-5289578d2f03",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a45af5f4-fba3-5f17-b9c6-a99f9d2b3847",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef0dc218-180a-5851-95c1-6545ba0a0bb4",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8ec4e42-3051-5149-a4c4-7dfcd1ac51bc",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:986227e4-5d5a-5dfd-821a-4c2d224a738f",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be650b9f-2489-5de2-a643-e4fcf99da69d",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15c9045f-1744-5fb3-84f6-125fe4f4b3e9",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87a5f8e1-710b-5e4d-b815-f5579f81086a",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b8cbf1d-e997-5dc8-9529-7bc2b8d0ddf2",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d037023b-1946-5c15-a7b3-5273963e3865",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7fddd0bb-6468-5222-a8c2-df2bfc72f98e",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9832f48b-07f6-5176-aacb-799a3c2d4ecf",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef4bb919-c74a-5c7c-bc50-02ee637b7fe0",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d3b917d-b8ad-5f45-bdae-6afdbefdec7e",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62fe56c3-6955-509b-bdea-e79c88d69662",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34486 affects version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cff9a595-af80-5fc3-82f7-daf8c36fe44a",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.5"
    }
  ]
}