{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:960da977-ee80-5e2d-8d58-364a908a9439",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1",
      "type": "library",
      "group": "org.apache.tomcat.embed",
      "name": "tomcat-embed-core",
      "version": "9.0.90-tuxcare.1",
      "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d1012873-2cfc-556b-b4b7-6b032c162744",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:461a4bd1-3ca0-5a9c-9087-8888f34d458c",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb80a5a3-1e01-5c91-9534-1cbd425389a0",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2020-13943 does not affect version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core. Fix for CVE-202-13943 for this version has been already backported by the original developers, so brunch 9.0.90 is not vulnerable"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:90748633-36d0-597d-933a-42828cbdb5dd",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a07dee90-38a0-5b4f-83c8-c76501801a7b",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23be150c-c70e-576f-975e-fc47ecd3a192",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2252433c-0dd9-56ed-be36-53f9b805f58d",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e58a66c-1604-5bb9-b807-45dc8add55ea",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e98ada69-2568-59d7-8d49-084c564258e9",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bb79378-3a6f-5837-9922-e55319432848",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f07b6a47-077e-5d51-ab6b-dd300a3fa28e",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bf076b9-6466-5d06-9560-6c4003b3e6e4",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dda27240-c7c4-52b5-8ee0-19453ac627af",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e64dee62-26c8-5f7f-805d-8ed711672358",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b551080b-ce63-56cb-b4f6-ce9f59ed3508",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:320bcc5c-e6d0-59af-9f57-4ef3c5a0c1e4",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec568e3c-0192-5295-b1f6-7f611eb82c15",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31651 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aec027ff-12ab-523b-bf8a-bcca270fe20e",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-46701 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89490bc2-3d17-5952-b83c-2621dbcf0bd5",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb052f38-9d6d-5d1d-9061-0d0b047a8871",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48989 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68e61fa5-8469-5e0d-8991-a52ece33b6d3",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fb9a767-5334-5a43-9c52-ec56afac6b7e",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-49125 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:543d95f0-f047-5d3d-a045-53a9eee925e2",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e63dd8af-7da6-51c3-97d8-fd066accdb9a",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe9bf467-de50-5257-91c9-70ad8329d02e",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6d9c0d8-d793-5f72-ba37-5e3d57f0d4df",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7549d361-11c3-53ba-b3ea-a0911693842c",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2385b3b2-8d30-5a90-b2ce-6389d3368eaf",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38769b33-98f2-57fd-9346-9b4bbd5a41ca",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3863f9a2-491f-5a80-b77a-40a0d234f23e",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a48717a-87d4-5939-8994-3b2f0e8e4710",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a79838f2-8bb7-5ddd-92ca-145a2c7f9186",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f65af01-c304-549b-ae00-f32cfd7b9ade",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47ccfa2b-e572-5962-b1d8-2b6cd3f92283",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be6c8c39-e069-5c8a-9b3b-cd1866d9664a",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29145 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb677942-363c-5c77-875b-f18f288a78cd",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73abc3b6-07f9-5dd0-9261-bc0f727b9383",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b5281e50-ca30-5169-8272-58cee32212e1",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4285b024-14b0-52bc-84fb-24c21fb5273c",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.90-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.90-tuxcare.1"
    }
  ]
}