{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:481eb9ab-a588-5751-b4b2-7f35d7b7cf78",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5",
      "type": "library",
      "group": "org.apache.tomcat.embed",
      "name": "tomcat-embed-el",
      "version": "9.0.83-tuxcare.5",
      "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6514a638-ea04-5cca-ad68-3c4b6be763fb",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c4b9c87-3a3d-53fe-b1a8-518ec951cd0b",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c9f8d4b-c640-5d42-8f64-65fcfe40052f",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23672 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f63ce00-5306-52b4-8780-563c08a37187",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:033d51fc-b059-5100-82cb-a4fb3d0f2a61",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ae4136f-a46a-570b-be7b-3cf917ed1c04",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aa1df7e-0134-5573-bf5e-d92cafd385be",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:13a7681f-ea11-5e88-8d95-7ae90a98c58e",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5017cb48-c916-5f43-a87b-9c5e813bb796",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54ed3d84-b064-53a8-8a81-489c2912259b",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:400baefe-4d14-5bb3-b629-b09fba5f2ff2",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a522bbb1-0bda-500f-b4bc-ee624a87ff2e",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e69c69ae-84fb-5064-8c03-8b8d68677f24",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f140706-3fb5-59d9-8c59-62b2ca5769a1",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:383a4f55-5a37-5fbc-b87d-66c911e6337e",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb08b41a-43b3-5274-a130-0062e5e2ff14",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dc115c3-9ba4-5268-9597-2f4bbf76b5b9",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cdbdac0-0d1c-5f00-ae12-4705ffa47893",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e55ac01-8209-5c8a-b218-3b2b993fda88",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2b7762c8-1c8a-5b95-a7b7-8c63437341ca",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c644ef-197b-5aad-aa41-3a3fa4f5a30a",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef9e9c5e-518f-5dd1-a47d-5c536e087316",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5ce27c3-35b2-5130-a410-957dddc1eb2b",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b476962-2397-5078-a9b0-b86b3175a088",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47e236c2-aa4c-5f9b-aa24-4e4a4d0fd4a2",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3e67589-fd35-5cc8-9a3e-59373272bc59",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:652bd061-acd0-51a1-b870-07f7dcf790c0",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46d0e8c3-8ddf-5dc6-9859-24a8275cd13e",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80031d9f-13ba-5cfb-bac9-350dd8885b7b",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51cea7c1-a840-5f0f-b372-511466eb3550",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dc8195f-8fa3-5f16-8e58-8bc3f7be6ec0",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a351a946-c2a5-51b1-9a31-efd4c0bea7e2",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34483 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8ed70e8-d38a-58ef-ba73-a65ab5af941a",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34486 is fixed in version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6e646d7-ad2e-557d-b748-97bdeb535f53",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c380d355-f4f3-5608-8d29-8d89286040d0",
      "id": "CVE-2026-41284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41284 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72155aff-3c90-5766-970a-97817b7c3ce9",
      "id": "CVE-2026-41293",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41293 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f558c27f-f51f-5a5c-9cb5-3e9dd7d3e6a1",
      "id": "CVE-2026-42498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42498 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01c19281-dc38-5c33-86a1-6902a9099795",
      "id": "CVE-2026-43512",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6a66fac-5b4a-5c4d-826c-6b29c97fb25c",
      "id": "CVE-2026-43513",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2271d255-a649-510f-90cb-ec50a73103e5",
      "id": "CVE-2026-43514",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f87ad402-3b28-5212-b0fb-04841f0e4956",
      "id": "CVE-2026-43515",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43515 affects version 9.0.83-tuxcare.5 of org.apache.tomcat.embed:tomcat-embed-el."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83-tuxcare.5"
    }
  ]
}