{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:26afec6e-336b-51ac-a561-c48f45f47182",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-catalina",
      "version": "8.5.100-tuxcare.5",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:833a1aa0-549d-594d-8d65-a14aa7a05f0d",
      "id": "CVE-2016-0762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0762 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16dedede-9315-53da-8a86-2e11bc5ed1ab",
      "id": "CVE-2016-0763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0763 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4693fc4b-737c-561e-b08a-012335d65c7b",
      "id": "CVE-2016-5018",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5018 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:647cb951-da03-5437-9c9b-316d155ffc1a",
      "id": "CVE-2016-6794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6794 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52c3ef8f-d579-5e5c-a275-a59178690769",
      "id": "CVE-2016-6796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6796 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd0a3fb3-4b6e-5247-8ee1-15e018279584",
      "id": "CVE-2016-6797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6797 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb418d96-2f34-5852-bc45-90faa9c40ae0",
      "id": "CVE-2016-6816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6816 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef995860-84dc-512e-9a42-5997db2acfd8",
      "id": "CVE-2016-6817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6817 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:726202e6-7a60-5e14-9c86-06e74ba90b93",
      "id": "CVE-2016-8745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8745 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eccfa476-de85-5dc8-aaa6-92831cf7f3b5",
      "id": "CVE-2016-8747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8747 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e15712e-ecf4-51b2-bb9d-75f24c55ecce",
      "id": "CVE-2017-12617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12617 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6dc103b3-09f2-51c9-9c90-9ec7119c5937",
      "id": "CVE-2017-5647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5647 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15a3f199-45ef-5910-9017-1cdfca22bbfe",
      "id": "CVE-2017-5648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5648 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4308d35-dd1e-5013-ba75-35ee677f2cfc",
      "id": "CVE-2017-5650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5650 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f95d0725-4d20-5824-a707-24b8619140b3",
      "id": "CVE-2017-5651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5651 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7957ca57-a2c1-5c91-80c2-447b6094e28f",
      "id": "CVE-2017-5664",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5664 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7ea44b5-32fa-5aa2-93df-1023a6682617",
      "id": "CVE-2017-7674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7674 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3262004c-3c3b-534a-b001-76fa36484c1b",
      "id": "CVE-2017-7675",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7675 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c4a548b-147a-58e0-8842-90612277b7a4",
      "id": "CVE-2018-1304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1304 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2e9285e-fb7a-5b84-9339-a60db85699b9",
      "id": "CVE-2018-1305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1305 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97aa7232-d915-5b5a-9a90-e81cb68c1c1a",
      "id": "CVE-2018-1336",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1336 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cff12113-d664-5657-a048-12f56d87cbff",
      "id": "CVE-2018-8014",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8014 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef91453f-d19d-55d2-92e5-f203f3bebddf",
      "id": "CVE-2018-8034",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8034 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d63ca05f-d0be-5c78-a5ad-dc0df271a1e0",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9163135a-4575-5feb-99b0-998cf42e2e0e",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:987f6f92-f50d-5713-8566-dea23f256be6",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cbeb6b2f-6af9-5880-870d-39a0472e02db",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat-catalina 8.5.100-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c950bdaa-d6f0-5d36-9d44-4d209eb7c7be",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f181e01a-3089-504e-8fa0-2da8245a43ba",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67bf03eb-b7ad-5a26-9854-dc3afdfe8cbb",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa5c1a80-1f21-5bf4-86f1-25e617821ff1",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a69b856a-d8da-56a9-a50e-23462f91be67",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf5a72ac-9b86-5f76-9be9-a412e03624c1",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37e0921c-7f53-5959-a120-a0e94181e236",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd52b8b6-9cd2-5234-ad4e-d8259c06acfe",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0acae553-455e-5ab4-a071-6409567d3e7c",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0248a1d2-8e16-5c42-964f-bd2d0e6124c7",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3932853e-088f-5d54-ab33-b7182c107744",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c239586-5b78-5bf1-8a37-410a086aef07",
      "id": "CVE-2024-52317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52317 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d44f32f6-8225-56e8-b3eb-b6b76ea69d81",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4822e7e8-8aca-5fd2-b171-1de03a296082",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:527dca15-05d6-5acf-9dba-23395cc98277",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4735803c-facc-529f-bbfd-2307720cd171",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:424f5931-d5ac-52ab-b72d-5433fb9a24be",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72589988-7c9a-5fe4-8fa2-bfe44736eea7",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38090093-5c15-5beb-81b6-d388aea64acd",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea4c56bb-396e-5c69-9016-ae23857a9873",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a955c4ce-4370-5ec5-b66c-dcb37108c8d4",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bea35897-7913-5689-bc95-494d656caf29",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52520 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ef0eb2b-2876-5694-9479-06b92274a51e",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53506 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dea8e98-faf5-5490-b488-9c328e0beea6",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80f3c6d9-13c9-5a4c-ad18-b75b77c9280e",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27b03230-3e89-5618-9696-0afa65aef0de",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32490197-59bf-5c7f-a370-2ae858abfa90",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dd46a885-ffbe-51aa-a086-fb25e6d8896a",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5b336fa-85a2-5242-ab15-c02cffab24d1",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3764b869-b667-5f32-b994-e5500f94976a",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:298f2305-655c-5b88-8ba6-ae6c68b145c0",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1526eedc-df81-51f1-9d8a-0639e38242a5",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d41bd2c-9100-5db6-b971-d1bf8411d344",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 8.5.100-tuxcare.5 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.100-tuxcare.5"
    }
  ]
}