{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:643c68ea-250c-510f-b3c9-e45c934538e7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-catalina-ant",
      "version": "9.0.46-tuxcare.4",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9db80d1d-160e-5201-870c-458117a9b0bd",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0399cb88-5263-57ef-a8ab-16dc5256e420",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fd68c22-5a02-5771-a767-af94fabee259",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fbe35cc-64f8-555d-b4be-5b1429781cbb",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aa698d4-39ed-5099-b2cf-d86be9bd3d5c",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4441c09f-2291-5291-8c6a-e23058dad904",
      "id": "CVE-2021-33037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f9c80cb0-b66b-5012-8f69-51d52655dd4a",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4faad8ab-a674-5446-b01a-9b5979020725",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65e98382-c234-5739-b033-65cf278ea74f",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e22bad8f-c980-5f02-a430-42453e31f3dc",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80ef2746-2899-5157-a963-39a75656b8b1",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-34305 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d0b05ab-9c82-5024-966c-93fcabd8d7da",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9aa07af0-06c2-5678-bed1-2e496914b1e8",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0aa3682-295e-5d87-b99a-45433e1cfc51",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b9bf6de-1c2f-5fd1-a7e2-3e46765bf0b3",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df93a939-dafc-5930-bcf5-a31bfe516658",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b62dc4db-a315-500e-a595-f80cc737dc59",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-42795 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:499badf1-1663-568d-a913-701b7ac431bc",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6709a75-c105-5a9f-ba1f-6d43550ccc7a",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4022b346-35c9-566b-90c6-128ee905981c",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46589 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:293ccad4-2282-5bd3-a83e-fd645671b71e",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c61b1b2-d4ea-5e60-821a-520f5896e168",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6eccc54-a72d-5bee-935e-7423d3e312d3",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb6525e4-9a4c-507b-a46e-5e78f3c21bc5",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:420ae886-c47e-50ca-9055-20e5f863de49",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5a73764-3482-5b6f-a7e3-f45bba6302c1",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d1b40d-f84d-5238-8894-2cbcc4e77d0e",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c62d45f-ff93-5a64-8185-9faa5accc5ee",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cd4ebc0-0f35-5ba0-a8e6-99b064a7bd8a",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0ef4a71-7f5c-5a32-9624-be6fb9ee767b",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1efd902-8940-5954-b1c0-e4b19e3a8fd8",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2e50961-3fb5-5cd1-90a7-7604402eb18b",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9088cbac-b469-5cb9-bd2b-d6e940a4698e",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c54726a-487d-58e0-9a21-430908d69ed0",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b4a6546-c8dd-560b-835f-cfc6f9216a8e",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:915f1899-512b-540a-9c92-2bd92e326f79",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c5dd994e-8fd2-5829-b10d-ba67aad359f4",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3fdec60-3bc8-5ab1-aa73-967bedcc26b7",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7340fd0a-5192-535b-834e-ef6793b79d33",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d436ae4-0d6e-51ac-908b-40c9516f2563",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8da07eda-bc71-5d7c-aa6c-8ccda5c24940",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb0a3a23-75cf-5b4b-adef-d67d0e420a84",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b9eb2bc7-dd42-5c9a-8693-7b2cfe6b55fe",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:708e5346-b848-5440-8229-71f01ee60075",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2889433c-8838-5cdf-8ea7-deb3eafeaaad",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17e78e89-ccba-5293-8b8a-9c0821497aa0",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01ac8d4e-eb55-506f-a3ac-ed1b21bd4f5d",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d876f794-45ef-5a4a-bfff-591a47c1ec62",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b10f863a-2158-5958-b773-467f5e2f6719",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f25520f0-b48b-5676-a3e4-54a5f837f5b5",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:639af2cc-134a-5e76-85f9-7e410b5e5129",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.4 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.46-tuxcare.4"
    }
  ]
}