{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:c052f35c-26bb-5773-8fb6-eda68c2504e0",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-i18n-es",
      "version": "9.0.50-tuxcare.2",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f3839d5c-ceb2-54a7-bd81-8f44abc8188f",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a0e61aa-c487-5cd9-a39d-c4f921dca823",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5be9babb-f8bb-555b-93dc-0955e5c60231",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98dba92e-c872-510b-93dc-5d5237fe18ca",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79699459-32c2-5529-80f6-d55877d1d148",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28b2affe-44a2-5a47-b321-62ecbc85940b",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c1b3d71-579a-5090-ad6b-186bf3ab7857",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce258fba-11a5-5906-a8d4-bec302b38f58",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe9ada7b-e486-53ee-8e1b-44f7664d9759",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-29885 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0db9cd0-dfa2-5474-8854-bab1e4022dac",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2480d5f8-acb8-5ac4-9f9e-1242e2289cee",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19ba0d9c-13f2-53b4-b059-7403eb4481cb",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaf6f234-ebf4-5241-98f5-ccddd85baf24",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baadacab-dc8c-51c9-8fe8-11651015b7dc",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:556bee13-39db-50b5-a570-d0ce51f532af",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6956d96-76c3-59ac-bb6e-72a5c3705ccc",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-42795 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abc3fdb8-51d6-56d9-bf64-cdefa0a57a07",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7bf88ac-0d26-51ff-ad43-48790a6f7711",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:433fdf57-930a-51bc-a66e-cd79dc3086ff",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46589 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:798b6ce2-60e5-5699-9ed2-30491c0d5153",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42bc8338-c5cc-543a-96e5-ddbe22df1300",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38642bf7-9419-5b55-8cd9-0c39833820a1",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e7ac8f2a-4cde-53d8-8a13-aad3fec47dfd",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32f9e6d6-4f9e-5c61-bd2f-ff890bfa290c",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a910826-6a93-520a-a044-3ba40e0032a7",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd5239fc-e1f1-5728-9119-c029d9d8f544",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a08b0ef-d628-582d-bbb5-5fd23a448efd",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15cb536d-e3a7-5790-9282-c7b2e683dc24",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:681e6d5e-f07c-55f2-9504-cdb7455b2f0d",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fa3b8b3-2c58-5e97-8a7e-fe4a1b46bce5",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31651 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf6f5bcc-a511-52cf-b8fd-66b1bba18cc1",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-46701 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7c56e08-5afe-5ac6-8ea2-6f697bbbb778",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36f40571-aa37-544b-9f22-d08ebf2a5877",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48989 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39ad6ccd-771e-5974-a308-d15f062a4ee9",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8c1e95a-1a6e-5615-b555-f235118cbd73",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11770033-70e2-520e-8442-1152b6de75e6",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4aced62-bf5a-539a-a7d4-4861048d7ac5",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:707b8ca7-3aec-5702-a55d-965bf8c93c27",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a70a46e3-ee56-50d3-969f-907268079d6c",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c28c802-50be-5bae-b5ca-845bfb888428",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6a4b153-4311-5211-8e00-1bcce2d3fe9c",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2c6cb7a-f956-5d28-8e83-4c6c374957f4",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa10fab4-a652-5f7b-8e40-b74692b13c90",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3992f8da-47c6-5860-b29d-06a8e1ef0940",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:feedd2f4-426b-5d04-940e-5b6899ab6557",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:20f2df51-8f1f-5804-ba34-aa5bddc4683a",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32d8ffb5-4168-5e22-899a-6d560f489d2e",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d20e5cb-755f-5083-9781-c0b6ddba9b9e",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4aad4f4-6990-579b-8171-ae04401c0f86",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fe182be4-4984-5c62-9c0f-d13b2ee13cd7",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.50-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.50-tuxcare.2"
    }
  ]
}