{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:203caf8a-e271-5d53-8ddd-f84e1455ba9f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14", "type": "library", "group": "org.apache.tomcat", "name": "tomcat-i18n-ja", "version": "9.0.50-tuxcare.14", "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:82a637a9-e61c-5690-8b45-46dd495cdd7c", "id": "CVE-2020-11996", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-11996 does not affect version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja. Version 9.0.50 is not vulnerable. Summary: The target repository contains a functionally equivalent fix for CVE-2020-11996. While the implementation differs from the provided patch, it addresses the same performance issue using a more efficient approach with ConcurrentNavigableMap.subMap(). [terminalized not_affected from patch_application_manual/not_vulnerable]" }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4de4efc7-8941-5a18-8ec6-2d7470331067", "id": "CVE-2020-13934", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13934 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:291735b8-3c17-5cde-a887-7c757ca57e52", "id": "CVE-2020-13943", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-13943 does not affect version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja. Version 9.0.50 is not vulnerable. Summary: Target repository already has the fix for CVE-2020-13943 applied. The maxConcurrentStreams check is correctly located in headersEnd() method, not in headersStart(). [terminalized not_affected from patch_application_manual/not_vulnerable]" }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8da3136b-1b0c-58f3-bf85-a8ed24f5f32d", "id": "CVE-2020-9484", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-9484 does not affect version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja. Fix already present in baseline since 9.0.35. Verified in java/org/apache/catalina/session/FileStore.java:303 \u2014 canonicalFile.toPath().startsWith(storageDir.getCanonicalFile().toPath()) containment check is in place. Advisory range 9.0.0.M1-9.0.34; 9.0.90 is well past the fix." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4dc779c8-93c0-52d0-a4c4-ed79224eca99", "id": "CVE-2021-24122", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-24122 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:895f260d-8d99-5f9b-ae21-014ecbdcea6e", "id": "CVE-2021-42340", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:6d8666a5-db41-517d-a890-7c9bc9ee6895", "id": "CVE-2021-43980", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a8ba6057-71bb-5b91-803e-3c98155d7840", "id": "CVE-2022-23181", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2989db58-fd11-5af3-8307-d149ca83c390", "id": "CVE-2022-29885", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:e70dbc94-fabe-5e6d-b4ae-e8c94a1a3b72", "id": "CVE-2022-34305", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-34305 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:09fea3df-021c-5751-bb5a-7b23361aa086", "id": "CVE-2022-42252", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3e35664e-6339-5053-bcc7-4ba39fa0f97a", "id": "CVE-2022-45143", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:0a6c2791-fc42-5eec-96d7-2698b245d986", "id": "CVE-2023-24998", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24998 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d6999bf1-57b5-55b3-93b6-58b28ae634af", "id": "CVE-2023-28708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ad80bac9-9667-5ded-95ab-1ad1e4020c41", "id": "CVE-2023-28709", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28709 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d3b2a032-33d3-5db5-95bb-a836ea4b2a37", "id": "CVE-2023-41080", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:9a185739-c20d-59e3-a912-ce3c31fe73dd", "id": "CVE-2023-42795", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a1494fb5-2b54-5a15-bb81-394b491baf38", "id": "CVE-2023-44487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:11b8ef3b-033e-5c56-abd2-9d0a0cbeb15d", "id": "CVE-2023-45648", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1e79c9be-e08b-55c6-aa7c-8b20f523bca4", "id": "CVE-2023-46589", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46589 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4015c6eb-21f2-5eb6-906a-6e0af376d3cc", "id": "CVE-2024-23672", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23672 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:c95a0d36-2cd0-535b-bb8a-237fdd760d10", "id": "CVE-2024-24549", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-24549 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ae6bbcc6-2009-5456-8457-65eed5855dbf", "id": "CVE-2024-34750", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:12ab0bcd-20f1-5bed-b3a0-a09e647d336a", "id": "CVE-2024-38286", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ac419d11-4d62-5a4c-9031-1597e812ca5a", "id": "CVE-2024-50379", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:8bfe4ce2-22cd-5400-a1f0-cd733c9f6de0", "id": "CVE-2024-52316", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:7df33fee-8904-550a-8464-c4e8070cc821", "id": "CVE-2024-54677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-54677 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:343f555b-9318-5c00-954e-b32a2c1d7d75", "id": "CVE-2024-56337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:babc3d5a-fa30-5f7f-83da-c178056c52e1", "id": "CVE-2025-24813", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4592fc2a-8458-529c-b11d-813e7d1c92e5", "id": "CVE-2025-31650", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-31650 does not affect version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja. 9.0.50 predates HTTP/2 RFC 9218 PRIORITY_UPDATE frame support (added in 9.0.76). Advisory range per NVD/Snyk/GHSA is 9.0.76-9.0.102. Code inspection confirms: Http2Parser.processFramePriorityUpdate method and priority parsing in Stream.emitHeader do not exist in this baseline. Vulnerable code path is absent." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:42323e50-e736-52e8-b098-69e366583014", "id": "CVE-2025-31651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:b2b46de1-44ec-5446-a077-a5578b839ccb", "id": "CVE-2025-46701", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f6e3526c-35b8-5991-b833-a01deccf95cf", "id": "CVE-2025-48988", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:05bf007f-1e7e-509b-a152-6719d211b55a", "id": "CVE-2025-48989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d303d42f-d0db-5d05-bdd6-28d90fe32d86", "id": "CVE-2025-49124", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:2f30d995-1d71-5047-a16b-4b2f2a82bf4a", "id": "CVE-2025-49125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ca1dc388-fa0c-59ce-a34c-38dba69bd424", "id": "CVE-2025-52434", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:06135cfa-fe35-59d5-9b4f-991a8b6262cb", "id": "CVE-2025-52520", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d14a3df7-0f0b-506b-9b6f-d1ec8a3f22bf", "id": "CVE-2025-53506", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:ca82f05a-1f79-533d-ba3e-72211b662ce6", "id": "CVE-2025-55668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d0a59efa-69fe-5531-adc1-6f72234bfb08", "id": "CVE-2025-55752", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55752 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f08ac2c9-eb35-5adf-bda7-554be432a03f", "id": "CVE-2025-55754", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:22df3229-c0f8-5582-b2ba-aa5759de383c", "id": "CVE-2025-61795", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:3e3e4d83-a413-51b8-ae36-53e0f9c08de6", "id": "CVE-2025-66614", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:a9d77d82-f4a1-57da-b9e9-755bda6d4427", "id": "CVE-2026-24733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4c8f3753-ee71-5313-947f-58817aa5c117", "id": "CVE-2026-24880", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:674851af-01fc-5c6a-8163-1cff207ce246", "id": "CVE-2026-25854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:96ec8555-66c5-5f7f-a461-6d5e314d5ce1", "id": "CVE-2026-29146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:669ffc9c-188d-5cc5-81a8-a7086dd05876", "id": "CVE-2026-32990", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:834c1d6e-f7f6-5f53-9d6b-9cc5ee86743c", "id": "CVE-2026-34483", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34483 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:25a848b6-ddbf-5712-b5d2-289bebe91ec4", "id": "CVE-2026-34486", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:d5b91a27-8a42-5db3-a7f3-1016c8d240a7", "id": "CVE-2026-34487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34487 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:acdd0d3e-1f0b-5b6f-9d55-327d51387525", "id": "CVE-2026-41284", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:f3cb1b23-6124-5ec3-a690-022e430c6626", "id": "CVE-2026-41293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:55ba0709-6c84-54c1-8318-c59245bdff25", "id": "CVE-2026-42498", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:1f563ff2-7227-57d2-865c-5379d252d3d1", "id": "CVE-2026-43512", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:5cf3684a-56a3-53a7-b324-6337f9b8350d", "id": "CVE-2026-43513", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:edc3105b-84a7-5d38-bc7e-5cc30c51171e", "id": "CVE-2026-43514", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }, { "bom-ref": "urn:uuid:4dede222-b59b-5452-9eb0-654b8c04bab8", "id": "CVE-2026-43515", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 9.0.50-tuxcare.14 of org.apache.tomcat:tomcat-i18n-ja." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja@9.0.50-tuxcare.14" } ] }