{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:78ef2a70-994d-5200-aaa4-b6968f9a8120",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat",
      "version": "10.1.18-tuxcare.6",
      "purl": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:8c8b4a3d-f595-5585-9f4d-3f81288de8bc",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78867f3f-8b32-5d81-bfce-38713d3e486d",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2fde398-4d2d-59e0-85c9-960d67fb2825",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7121f276-98fb-5c35-937c-d996b864eb4a",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6fdd76ca-db8d-521c-ad75-225a4230cc54",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53c0b080-9992-5d17-87cf-3a72a2d74bfb",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb8ce033-a0d3-5abd-b201-8985f660968f",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee1e7a71-72f1-5a79-827b-d2fcecc1ac47",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01099ef6-07b1-5089-a95c-50bb0ab73852",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dc05ad3-ca80-59db-9870-354c66c525e5",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f524bb9-d86a-5a91-9c4b-6b0f6e42b711",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0269534b-0478-5bf7-a9a0-da54071c55c4",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2dfa1ba6-1261-5966-87f1-2c6d73888878",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c4a652f-845b-5eca-a0b9-41ba12c2fade",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca487527-6f89-5802-9a9d-cd2c0d16406c",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9b1ace6-ef42-5eb9-a478-fd3b52de579f",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d00cdb15-7ed5-5ec9-a19c-8e6405e90cc6",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56b066d3-136c-57d2-a280-7f51aab448d3",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c474cd23-5143-5471-bed5-02af7fd255be",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbc85bf7-741f-59a8-8f1b-34cf2dba979a",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c102efa2-501b-5f22-a7d4-51e2ad4d2b7e",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01dd5b96-68a0-532d-9215-a24c13c59de7",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8124a5cb-dde8-52b1-9bf4-f2761fc4f882",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0aa7f8fc-925e-5f0f-947d-fa940b30f5ac",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a321c98-f374-5ae2-b237-a3f0c91bd9f0",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e9d9ecc-b781-550c-a80b-afb81a9015f8",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ac16c5c-fecf-5b8b-ba7b-641e7c5947a6",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:751a4bc0-090e-5186-b163-ac97f7da63e1",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f068fbc-0365-579e-a89b-692ce393df95",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:377be901-3377-5cda-8cf0-30fba28f03eb",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:905cae54-43e9-5b7a-90c1-91566edb5adc",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4211e612-bc78-5e08-b037-c5add98c50a0",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9f925d5-9aa9-542c-9cb7-803bb2a09794",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e01fa90-64c8-5b3d-b742-b44624dfede8",
      "id": "CVE-2026-41284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41284 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95758da2-fd51-5457-8880-f3141a74a7a4",
      "id": "CVE-2026-41293",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41293 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d9d7cd1-d35b-5460-b76b-4ea8c62d1c8e",
      "id": "CVE-2026-42498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42498 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a50e6d9-9e8b-5544-80ea-12237580823d",
      "id": "CVE-2026-43512",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e7f3cab-7f15-5b62-ba22-c3a5af17cd9b",
      "id": "CVE-2026-43513",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55049fa1-3b1f-544e-830a-92ac08a10e79",
      "id": "CVE-2026-43514",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee90d945-5f4f-5ea4-b287-4e589d97a0e5",
      "id": "CVE-2026-43515",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43515 affects version 10.1.18-tuxcare.6 of org.apache.tomcat:tomcat."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat@10.1.18-tuxcare.6"
    }
  ]
}