{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:60932412-ef44-5153-b873-bed5eb291cd2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-catalina-ant",
      "version": "9.0.87-tuxcare.3",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9113843b-a980-5188-a706-d503807e0126",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4e6444b-c283-5b22-8e1c-ef615e17c7c1",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c967645d-2185-5e91-8e82-46af32f4962b",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f3130ce-501a-5aed-8f61-1e7d0087c753",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45d86906-dda5-5113-87cb-3eba2f39103c",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b228fb41-f51a-555b-a7f4-93feed867b76",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd19aa0c-466e-5e4e-b58a-d0ecf2e2a6b6",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df01c81d-0b62-5b5c-8b73-639c1248358e",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59dd6efe-67bf-58d4-8d77-cdeca12531bf",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ad16b7a-3527-545b-8ae7-eeb3924f25b7",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d395d9c-49aa-55c6-9948-0535ae767a22",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4539b990-70b0-52b8-8519-f244169a25e9",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cc8aa452-0f49-53e9-991b-1cf44799a91a",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fecced4-b35b-55cb-b8da-e40bf80e0c41",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20869002-b4bc-5828-be2d-c6848564ba32",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9581cc3d-6022-5d4b-8dbd-4ab35a823e64",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5331131b-46cf-5966-82dd-02c77b1f460a",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:067e39bb-11f6-5544-8286-dd1724389e1e",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49e8d5be-ff54-5ab5-8e38-968e5e1a64b9",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b690640d-c93f-53dd-a1dc-15ba7b34c2df",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4939e7e9-cc98-53af-b8ea-17c8621fb400",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48988 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9256f8b3-39d1-547d-ad08-716c42f1f0e6",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c4a97e3-0c9d-576a-b5ee-499e536b2073",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4b9d4d8-42f6-503e-815d-ee46f45f1621",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8a7ddff-ab38-5fb7-9419-c6bdb8570fa5",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbe2764a-f939-5318-a9a0-ae95bbce4869",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52520 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca95bfe8-5f23-5976-b08c-163406fd4635",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9169e44f-2f3d-56e5-ab04-fb9a92dc9b2e",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02af555a-f4f7-57af-a1d8-f4f744aedb5c",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f048863-0c3a-570b-9cbb-6e089186d795",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc9b806e-ce70-5785-83f8-13116c053156",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa223f05-f095-539e-a36a-d4e5a0f881f1",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab32a296-3fa6-548f-8cea-e15c25c1f32a",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c40e8fc9-9c05-52d2-9dda-2b23b9fff90c",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:204065d6-9a1c-5c2e-869d-ce16f902d29c",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4cffc79-f9aa-5740-9192-9ff66ab34796",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bc68e22-2b54-52c4-bc44-e7696ee56416",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29145 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:283383ca-af4b-5594-a09a-35e1a0253f68",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e1828d78-76ac-57ea-aed2-4ebbfc90257f",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f78239f7-d2ee-51e0-9bc2-ea5984526015",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acbaa597-9ab2-5150-9f03-d471fb60c99f",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.87-tuxcare.3 of org.apache.tomcat:tomcat-catalina-ant."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant@9.0.87-tuxcare.3"
    }
  ]
}