{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f70dd880-a651-5d6c-a6bd-a3f0aa79cfdd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1",
      "type": "library",
      "group": "org.apache.tomcat.embed",
      "name": "tomcat-embed-websocket",
      "version": "9.0.46-tuxcare.1",
      "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:09e0a1a3-c0f7-5d7e-829f-87960f0c741c",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dbffd896-0e67-540e-a92c-91c8ec3d98d7",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38ce06ac-0488-515b-a112-d36c8474dc45",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b06a846-7afd-5345-ad91-f15869f9ec3b",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbd71e86-30df-50ca-9657-ae9e261b2d44",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6329c22b-e28a-530e-8a69-b473f01a72d0",
      "id": "CVE-2021-33037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38f01093-0577-562a-922f-ef910db065fa",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c571e48-4bd3-5e76-ad82-70cdcdad58ca",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:246b5fec-60cd-57a5-a533-09d4a8221ac5",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ecc787a7-6a84-596b-84ba-69d109f9d5e6",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8b95a23-bbd9-51d5-8015-bd2e6a7946f7",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d1982af0-9ea6-5329-a792-a87f91ee0d5c",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb25e1e3-7261-5572-99aa-ffd7fd079bcb",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:34208fda-da75-516d-ba2e-62e8813389e3",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75f95bc0-ed68-508c-9f17-38d3ab306d47",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fed6ae38-a1ea-57c8-8a19-6caaaf990b29",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:900aa6de-e758-56cb-8fb4-08c82a6cf50a",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-42795 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f084e692-03cc-5a67-9779-842857095887",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a11bd9e-cb4d-5fa6-8448-08158724656d",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:295517f0-7b71-5149-b1b6-3886244a81f5",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46589 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24ccca4a-8739-5e1c-90d3-fd6c73a81d54",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e83298a3-3132-510c-a844-720f26b14171",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a636b3ce-3e09-579b-a6da-c0b5475381f1",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b18c8018-0a4c-57e9-9acf-e6a06fa4b6bb",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:454b7f45-625c-5a8a-8d7f-cf70eeb21ed2",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ed080d0-9479-5d30-86c9-1b4b96005ada",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25bb25b7-6969-525e-b2c4-579ffd5fb78a",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6350a67d-f885-581d-bad5-d5d85056e2c2",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbcf745e-de02-5143-9868-aa2bac8194fc",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6d16c22-4a8b-5919-a080-a35ec4168115",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3bd1510-694a-5bb3-937d-ded665db41e1",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:442693e9-5aec-5aec-87cd-639b37bed85c",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-46701 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4179a29-c03d-52c5-a4c7-293492d02169",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48988 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f94ecaac-bb42-5086-9659-76157175f5ab",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2f1f90b-5b57-5984-b5fb-0cab1e7c4a07",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f20d4a7-89ac-5639-9653-9aa830c222c0",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1d00c00-d0fb-5b1d-80e3-4659f252a705",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d16caa-2cb6-5b11-915a-49387d5cd757",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:865bee33-8f4a-5c0a-a4ba-9c4323fe7c1e",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04ae9c2b-8dab-5395-8d4f-8aa24044de3c",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:949c5bcb-566e-56e1-86b1-c1d654420058",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:134a0146-d137-5654-a186-321d66b7a9d0",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35844871-5800-516c-84b2-6c06f61d575a",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddb54846-1ffd-5908-b786-c60bb5c9f956",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0381e11d-06ea-563c-87b6-f5f63f4c19cf",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4527a76a-0ae2-50c7-a146-446ea335073c",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1139e4fa-45fd-5de4-9c48-fc59dcff6e26",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22acf1a1-b9b0-557c-9bff-4425f55a1637",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:967913d0-d6b6-5a92-a8e0-e71f079f01b5",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0b6be6a-95c8-590d-91ca-a3de316c884b",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:259bc0a3-6183-5e12-be42-ce05449ba584",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.1"
    }
  ]
}