{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:9b2d594c-eaf9-57b5-83e4-e3f6c6a8442c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-api",
      "version": "8.5.100-tuxcare.4",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ea005fef-943a-5651-840e-fe20c723b674",
      "id": "CVE-2016-0762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0762 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcadce6c-55f8-5bb5-a80e-5d0db7fbd0cf",
      "id": "CVE-2016-0763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0763 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a84eeaa-db0f-5c9c-aec2-0a47a91d2d77",
      "id": "CVE-2016-5018",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5018 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:705960b0-810e-5186-b975-013da5643b32",
      "id": "CVE-2016-6794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6794 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b1163f5-c943-531c-bffc-f89654b6d65b",
      "id": "CVE-2016-6796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6796 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e46b63da-7d28-581d-85b0-81088bf1cc9c",
      "id": "CVE-2016-6797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6797 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e32ead0b-de2c-5206-94e5-673aa2ead5f4",
      "id": "CVE-2016-6816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6816 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:869a699a-9312-5813-92fc-3b4ca70187e8",
      "id": "CVE-2016-6817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6817 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8c92531-d786-5423-b812-b4609fe10496",
      "id": "CVE-2016-8745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8745 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a322bc28-99e1-52cb-a9a6-10ad5b933233",
      "id": "CVE-2016-8747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8747 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a846391d-442f-559d-a467-5c3def3cd236",
      "id": "CVE-2017-12617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12617 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:269ac47e-f472-5e87-b7b0-ed4ab5180cf9",
      "id": "CVE-2017-5647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5647 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c96facc-0588-589d-a348-814db728ea36",
      "id": "CVE-2017-5648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5648 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46d048f0-bd6f-5a62-80fb-e0c1398713f3",
      "id": "CVE-2017-5650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5650 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1797e589-61ea-525b-84da-3c1108d48d55",
      "id": "CVE-2017-5651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5651 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0094f526-366d-5d48-b3d1-f9a8b71159e8",
      "id": "CVE-2017-5664",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5664 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2351a83a-1f68-532e-9d3d-b44400c9f73b",
      "id": "CVE-2017-7674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7674 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8831f54-5cc5-517e-a248-e3659b114c6b",
      "id": "CVE-2017-7675",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7675 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9c3d9585-dc20-5a40-9492-53c0b539de23",
      "id": "CVE-2018-1304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1304 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f203d001-7c0f-503d-a4c0-332a6f89d9e3",
      "id": "CVE-2018-1305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1305 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e81a897a-6bf6-5d61-8439-2b95001a685a",
      "id": "CVE-2018-1336",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1336 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5736c62-ffc8-5370-b8f5-6d3c1604123e",
      "id": "CVE-2018-8014",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8014 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdbcf789-396d-538f-8fa4-1c07ab419117",
      "id": "CVE-2018-8034",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8034 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9caf0897-527f-540d-b767-f823bf38d28b",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cbf1606-7557-5b55-a310-d01580fe1135",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b3bdd0c-b774-55f6-95d9-4dd2688fddd9",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0741be4-5203-59ce-853f-d965cb442d60",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat-api 8.5.100-tuxcare.4."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33633bbf-5933-55c5-ae63-74f7b029b04d",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d6c85d4-3025-5a29-bf5a-95d5b3c20bf6",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:062250bc-7d12-5fc4-ae35-73f55c4b66b4",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcd2415d-b8a2-5adf-816d-893462fc0154",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4d0dddd-4c7b-5a5e-a6b3-9ae09fd5e939",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28bb610b-3357-5eef-89f9-5bc4bf30aecd",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77faf653-7ba2-5738-8688-1b9a582e9d8f",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:746940e1-2b33-51e9-979e-260365d0db69",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e034651-5421-5c38-817f-d6962efffc50",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7fd237a-6d6d-560e-9ab8-51d4ad3d0639",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ffe6708-1c5f-5628-b8a5-eb057be717fa",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51a39f6c-7945-5654-b4d3-b320f4c82c1f",
      "id": "CVE-2024-52317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52317 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e012123-6e25-502b-80d4-fae7a848e562",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5a40649-4dd5-56ab-843d-9213dcbc7b7a",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5358219-578b-5465-a9c5-71721b22f421",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4fcc3854-5ff5-5566-824b-bd508a57eb99",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8430695b-9df3-555c-a0e4-607990a882c4",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ca682ae-de84-556c-8461-9278b7c4b35b",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87a3552d-2316-59c3-94a0-8d82e4c33b3c",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa213561-ac0c-58a6-8589-1ab7cc920be4",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00036aab-bfc3-5269-b727-3240d91b9b0f",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24f98946-52e7-542c-a1d8-19fb009c3e85",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52520 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8154e726-a368-5f6e-bb86-7f2bc10d6273",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53506 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4baa4dfa-572e-51b3-9728-55c5bc757333",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f9d0cc5-2837-528f-bbc5-21be5caa5dcb",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:892f1f2f-5149-534c-b3cb-f357aeb902d7",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55754 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d6bce87-81e4-584c-bc84-5fcfecb86823",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61795 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c82b331-e6cd-5303-9581-c76f95a55419",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1984df1-f18d-564a-b17e-bc050cb53250",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf0facf9-d72f-5224-82cc-2edaf4524727",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7dd2c50-7392-51f7-9355-6015688cf651",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0415f6eb-ecf4-5a24-83d7-5a17c55515db",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47f7afab-04c0-5a78-9262-f6518fe614d3",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 8.5.100-tuxcare.4 of org.apache.tomcat:tomcat-api."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-api@8.5.100-tuxcare.4"
    }
  ]
}