{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1bfa7616-2247-5f78-9c64-36d0e448e999",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-catalina-ha",
      "version": "8.5.100.tuxcare.1",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:264029b7-8d36-5d16-adf9-6e81245a84c3",
      "id": "CVE-2016-0762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0762 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28f72f61-bdb7-5e85-8fdb-72f037911f33",
      "id": "CVE-2016-0763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0763 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86c8bcb7-899d-5761-9c61-e65dad66c0ee",
      "id": "CVE-2016-5018",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5018 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:475cfa4d-a2c1-5f9c-bfd6-e8430c7d1103",
      "id": "CVE-2016-6794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6794 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:44d7a98d-6d3b-5364-af61-38b86040d024",
      "id": "CVE-2016-6796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6796 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d168ddf-fa09-52d3-bf09-6110d29ebd98",
      "id": "CVE-2016-6797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6797 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f27dc75c-1fbb-54a8-a337-23b0d9e6a626",
      "id": "CVE-2016-6816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6816 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:576451cf-91c2-51c7-8707-d66a228fa0f8",
      "id": "CVE-2016-6817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6817 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:696615d7-7f9b-5b9b-863b-06bdd395b06b",
      "id": "CVE-2016-8745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8745 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d773372-e52a-531e-8345-323bbe86316a",
      "id": "CVE-2016-8747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8747 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2877374-0663-5411-816a-e297132bbdcb",
      "id": "CVE-2017-12617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12617 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2a714a8-373c-55d1-a409-cac5d6a0cca8",
      "id": "CVE-2017-5647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5647 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10a437fe-18b7-55c6-8258-0b5545af1292",
      "id": "CVE-2017-5648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5648 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:40a86165-578b-5dbf-876c-e712e130fdf7",
      "id": "CVE-2017-5650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5650 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3d5ae77-dd22-588c-b576-25519fa0eb22",
      "id": "CVE-2017-5651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5651 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7684fa6-bd22-5b15-866b-223cf4ff5085",
      "id": "CVE-2017-5664",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5664 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edd21322-73cb-5dc8-ab75-67469d751fb6",
      "id": "CVE-2017-7674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7674 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:849a84ef-6529-535e-b8ef-dc3b97c43adb",
      "id": "CVE-2017-7675",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7675 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50f7c722-604c-55ec-b7d1-d27f61923830",
      "id": "CVE-2018-1304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1304 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c777cacc-2de4-5013-9a49-719f66d084cd",
      "id": "CVE-2018-1305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1305 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:356fec22-7236-5e3b-82ec-ff2b9c1b9b8b",
      "id": "CVE-2018-1336",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1336 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cb8e861-0fa0-56bf-af9c-06cec5a52c85",
      "id": "CVE-2018-8014",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8014 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3951b24-7fa5-563c-93a0-0bc924390872",
      "id": "CVE-2018-8034",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8034 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ab3e044-0979-51b9-a4fe-d0209ef707e0",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b14c46c-a686-5408-8c11-d1fe65c1b4e9",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:508ad3c5-47fd-5a03-a60a-440eeedf25d7",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c14d221-4c7e-5106-b64c-d5a682eeebe2",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat-catalina-ha 8.5.100.tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff163f73-c774-5217-a027-f432a6c05945",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be6f7de1-fd9e-5d4f-b941-5ceb3569dd0a",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a1535c0-d4e3-50e6-9734-dd07427da600",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a295666-e71a-505c-9944-dcdb9bb4afd1",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87b274a3-6b9e-5ab0-8f4f-516e17749448",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55b7bc50-d2af-5e5d-a0dd-da54b5669c06",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:73eef6a9-8543-54b1-8f57-b6f1e162b5c9",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a261dab9-9496-5806-aa46-a5c97b2502c2",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75cedf01-ba08-5adf-bb35-1fdfc24321b6",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:448224b8-acb1-582e-a6d6-cfc6c595a539",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a06f2760-55f6-548a-8301-4dba3d055ec2",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6e63979-7c5e-56ad-a877-aa1321f68112",
      "id": "CVE-2024-52317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52317 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67f70b4a-21e5-53cc-acc0-6d994f02490a",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:26db6ce1-0495-543c-8d7e-cbf9c8cb163d",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b38c411f-8653-5791-b9dd-c09d5bf4c112",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0612fb88-5d92-582a-b179-035f580639d5",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c6ab654-d410-53ad-92c5-3cf2572ac033",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9fe8a9d-fe8d-5cfa-bce5-65bb2eb8b16a",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd851998-8eb9-5a2e-aea6-c995a2e82736",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48989 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f849cbe8-b89b-5f44-9abf-23e1157a3ce9",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-49125 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a1cd39a-d5ae-5955-a721-b3a1b80a7d6f",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5535e192-3196-5090-9d7d-58042303e126",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52520 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0831a391-e47e-5be7-b09d-b02e71fc859c",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53506 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43485bd6-fe82-51b1-b730-9eef30c002c7",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55668 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:49256cc0-c796-5cdc-8b19-d8fba695a43b",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23bfb34a-1e54-5510-b9e0-303c26b5a166",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55754 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aab9034f-9a92-51ab-b58f-9aa22538fd22",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61795 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76a7b8f0-7200-59c7-91c5-978595684786",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fed95499-8eb7-57e1-a41c-696fc16c3745",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbb12cd9-a328-551d-af76-81f147a0887d",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54ef7cf1-79a4-55ac-bad9-9d373133ff9f",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe8f9ffe-2c96-53d3-80d6-97771648f77f",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76ac1280-7027-56aa-9454-ca7ef7203c85",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 8.5.100.tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@8.5.100.tuxcare.1"
    }
  ]
}