{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:35bc9ea7-aea9-592c-b125-7ac43fe06bb7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2",
      "type": "library",
      "group": "org.apache.tomcat.embed",
      "name": "tomcat-embed-websocket",
      "version": "9.0.46-tuxcare.2",
      "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ba5535ae-28f8-5870-9e75-8d82b89b2191",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a327b20d-a859-5f31-b406-c524274935bf",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee965bb0-04d2-5096-b752-2bd75761b716",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22d6df3a-634a-5e06-a27f-a0d6b1d3a264",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f3c479a-305c-5faa-8452-8f6f29c50b2f",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40e1c5ca-efdd-519e-8585-6207ef8d5434",
      "id": "CVE-2021-33037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:188d9ed3-397c-5fa3-9a7e-2d197af69003",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f2c0f31-1ece-56a7-87a3-fe0e9cb4956a",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2492d198-ac4c-57ed-bac0-5ec9f0c95da4",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8a5581c-1a56-583a-8220-92a0962f4b6b",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:89fa29ba-ca68-5978-8c3c-37d1dea7af81",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b23e7b0-948f-526f-beee-af2a3ef62f8f",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7adb8940-3464-5983-9626-f1d2c1ae6225",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5ba584e-7a2c-5ac4-9b00-a77658a75668",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b722da9-eae0-5ecc-891c-b744af725d10",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac012249-9da0-572b-bba1-70c9fed35da7",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9945b3fe-11eb-53a3-8e1d-addc0eb84c71",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-42795 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50278070-c770-5681-b027-ce130afbc7ea",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55d820c9-0e50-5b5c-89e4-8dafbd498613",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8bdc314e-ae45-5b9f-b33c-42db02876a47",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46589 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c39bd30a-7482-55b6-a9cf-39a6c6f09c60",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cd39359-24fc-595f-ac2b-2afb692ef472",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2b46cf0-da6b-5e3d-9cdd-c2eaacd22275",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3d97f5ab-3f2b-509c-8f2e-0d37cac12c23",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d2e2358-e57d-54dc-9f72-fbc2af296164",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23cdd43e-c4b3-5bed-a071-541ed71fdbe5",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:932ae56d-7794-5b68-aaff-f28bbca406d1",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9a3ecf2-7208-5bbd-906e-3c46a9f5c62b",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b4a0e45-a920-52a8-8fdd-7b2e0f424574",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5479735-7083-55cb-8b4d-94e2e399211a",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74245963-377e-59f8-9dd7-e9b5834a1388",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3c382eb-2b6a-5c99-9f50-898af7944c25",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-46701 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0019fcb-8fdd-5661-919c-d2a9c1c9e625",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48988 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66857190-dd38-5229-bc3d-0abbc6d5c7ea",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02544625-6302-5faa-9488-37b8bc6ba8d7",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79c26423-1657-5874-888e-c1e49cd68d12",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e08ad59-e458-568b-8f6e-556d7b98f8e2",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f1b3c5fc-8e54-50fb-b4f1-5d4b7e060571",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ab098fe-ba4c-576c-9eb7-b842a95f3542",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec7b99a5-576e-5237-ac2e-2ca4df2bb98c",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe326805-3011-5bd1-8a13-f8b7029c4d88",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46ec8e04-4651-5786-8e13-66dfe730fc7f",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f92c7da-f44d-539e-b0d9-8ece365be2d5",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:204f51c5-ce66-5300-97b1-6e45c8cdca61",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31c9e4c2-34d4-5642-90e8-201ba044a89e",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d3187b-a9db-5e66-aff2-07c7bc0841a2",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:81751177-6ceb-5160-96d3-e3c54969ac81",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cde61cb1-3788-5751-8706-e233470bd495",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e11cbe76-a47a-5fd5-a235-74818979a018",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45ceaa9b-b024-5a18-863a-7b1b47b3faa4",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b59e07b6-72f3-5dda-902c-f4fbc9589a3b",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.2 of org.apache.tomcat.embed:tomcat-embed-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.46-tuxcare.2"
    }
  ]
}