{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b0aec070-11c0-51b2-8ba1-ae4d1e02ef69",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-catalina",
      "version": "9.0.46-tuxcare.7",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:274640bf-20cb-5db7-9dca-24a6b4bc2194",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27c2f58f-bcfe-5baf-9dc5-e1da11e62a71",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a71cde0-837c-59af-80eb-7b52557c984f",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03695511-7679-5ae6-88a5-4acf7aaf33f7",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4184bb0-c9ef-5e69-9839-4e0eccd59ca6",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df3ac9bd-7309-58c5-8a59-d2cf962b47f2",
      "id": "CVE-2021-33037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2306e744-51c6-5767-b5bf-ba3c54d7eb29",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7bb4a9f-1cb3-5a9b-90cc-1377105a49b9",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:611a7a76-68cf-5e45-8d8b-6ffceaf330c6",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc3ec1e5-9d89-54d4-88cb-a402daa701f6",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2eb0bbd4-1ee5-5831-ab6f-1cb496ef8548",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-34305 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f39c9faf-f30b-52f1-9e2f-efe4f130450a",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bf3c482-a31b-5617-8bb6-b9574eac3097",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e658234-fbfe-5a78-a501-fd2298d2f61f",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86def1cc-d6c3-5fde-8cd4-3c97bd4f40ec",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7937194e-518f-5196-8586-f6d5bb92e27a",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebf30b8a-5c46-5d97-9428-68c59e50fff8",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:717f0fde-1722-512d-8668-31d66a1d8251",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f3fbbdd-716f-5527-b44c-5588540e1499",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:368cd00f-31e4-554b-b6ad-b680b766eee7",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46589 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8585e984-6381-5cfb-8d69-e04555e52935",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caa243c5-80fe-5ed1-9d14-d616dd1a307c",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a2a4353-464a-5bd9-aacb-355d4c42ea73",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a18f72f-ab67-5489-ba31-2a3d80b53df8",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0d2f446-5948-592f-9563-288c8d4173f8",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:78b3f346-2156-5ea6-9dbd-6a22e630a86d",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b3d3cab-1321-5e8c-9b82-88470ad03766",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17fe2a4b-8e91-52c7-a657-12dfb5a9a4b1",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96037f78-02c4-5dd6-91a0-cdf09c328fa9",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:228e4804-6350-5bb0-9a38-98b494910d50",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ead8d055-c9d6-5af6-9176-a5efde980b5c",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3bafed5-08ce-5d78-be98-39b242adfd2f",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e5d63eb-b00c-5af4-9460-50c9bbd0d5be",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a601c602-4606-5635-8073-217ccec84b7d",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:553ad530-f1f8-5724-8b7f-69171aeff73f",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:950d5f2c-c1ee-5204-be6b-a29c958918f0",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f98ac3b-1479-5eb0-b4e4-f8d921742f05",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f2e0b14-40d2-56c6-a4e1-8fbc44e0e021",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:624805ce-79f9-5f22-b98b-2028e9c925c6",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e74e46a9-c267-582c-b7d8-00be01fb3f91",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63216bdd-6dc0-55d6-8a81-2525c12f1c84",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f05c52fd-7c84-5dcf-8d97-c5322bcd0785",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b486edf0-90a3-51d2-acee-3d45729ce0c2",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b2a072e-8e50-5815-b0f2-9e7d31cacef8",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc24c6b8-d2c9-51fd-8478-764128474c90",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97c41756-d1ae-5ccf-90e7-61b83cb43f8b",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16da9b09-6ac7-569a-9c18-51e96f6cccba",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a9cedfd-df99-5eaf-800d-8a47ceefa6fa",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efae0bc3-a477-50de-b538-2ee234af123d",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:408b048f-3772-5e40-9af3-360e29de6553",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3fd07ac4-a1b4-5031-9b00-9a5dbee8d2a3",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34486 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:983cc864-5d5e-576c-a2c2-c8427f15c5e4",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a4bc9eb-34a5-5429-bccb-a9f9249cb313",
      "id": "CVE-2026-41284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41284 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05e1077a-67a2-53ee-9485-b7f5dc8b7e7d",
      "id": "CVE-2026-41293",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41293 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7ca7a4e-b3d9-588f-9db6-88c1a25343f4",
      "id": "CVE-2026-42498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42498 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3b2c1ef-c618-53c4-9fd3-9e551d7c649d",
      "id": "CVE-2026-43512",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f768cb9e-e755-5b81-91a0-204c4458b50b",
      "id": "CVE-2026-43513",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f0c6d14-259a-5401-ab5c-0c595859285d",
      "id": "CVE-2026-43514",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b03d84d0-242e-57af-bbc5-df0f7d9141de",
      "id": "CVE-2026-43515",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43515 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-catalina."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.46-tuxcare.7"
    }
  ]
}