{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5c69357c-db97-587e-b795-e7e947cc90b8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-i18n-ko",
      "version": "9.0.50-tuxcare.7",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:12add77d-993f-5cdc-bebd-b4dfef932314",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e3cab3d-1195-571e-a0e6-d6fff830681b",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37977407-5636-5410-be16-12bf633acb2e",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e98ad86d-d2c3-518b-95e9-727d9e3acd16",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bcd920c-6e48-5954-9c08-834a206628ce",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b60f0b1c-2dba-51ca-907e-93918fcc20eb",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7de41e00-9358-583a-a401-05a9f4933551",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:792498d4-f2f6-5ed2-b6c9-7f1074ed4937",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dea659db-48b0-52a0-a5df-194a1c5e8521",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-29885 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c171f268-f55d-5377-bc99-87f2bf4ce867",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:396d10bf-3ec2-5350-84d7-21b8d7b4a9e0",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af74b6a3-7ac7-5ad4-9d64-2e94c171f587",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ffae30a-acdc-52c7-8718-5acd40182add",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:189a05b0-12d9-5238-b0f4-89e4e2c7ee99",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7380293-0031-5897-9dd4-7568bbf582ce",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65f185fe-407b-5806-8b0e-78b9e79c93f1",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54dc8a7b-d88a-5923-b74b-87b0419150b8",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54737e27-a3ae-5ee7-b330-85f4d69b09e7",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:632c1855-9a1b-554e-830c-c33accde5719",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-46589 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c485b56-8327-5db3-8660-598978f577ba",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:636fec85-2d31-536f-bbff-4d24c3c7ee5c",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b729941c-28d3-527c-82eb-4dd1c3897da8",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32841dbb-bfe9-542b-a122-69bc56a6b61a",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c4baf5e-6996-5274-ad57-5d5e838b38e6",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b8e3a0d-aa1f-53c4-b9fb-eb62939bfd69",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8df3f50a-acc9-591f-933a-18dbf3edcf8d",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14995c13-caf2-56a5-ada6-5f683aea758a",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cc62ac1-05ca-5848-a908-e3ce69430cc5",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c51d1044-ec25-5f1a-ad56-dc688eaadf66",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2a62893-ecda-5fcc-af3e-bcaf61e2a92c",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:497fbf01-8560-5433-a6fe-29275675206f",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4649d56b-a06f-50e3-9376-e7e300088574",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cdb6325-98bf-5e04-9d57-9a427fca601c",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48989 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e74fc4a-0acf-586c-989c-df93fdc2c280",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8459dcb-ca25-54b5-9409-839f84870a60",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08ca24a3-b1db-5514-94d1-07be0dcc55aa",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e670ce37-f59a-5d56-b320-021541aa43c7",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a24de126-d768-5d46-94d7-40be6dfc529e",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fef9460-2ab8-55ff-85f9-6cd926498e8d",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0660f9a7-eac2-53ce-a219-e70052d81986",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d869a58-552f-57c4-bf31-31838d009eaa",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bdc6c57-c9c2-5022-be20-b35a700e6eea",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:504253be-43b5-5629-8572-fe36da42db27",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aea41c8f-be88-5730-bd7a-71c82aaed98c",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4afe3271-ed3a-55ed-ade1-797e0b365f11",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c5dc1b1-881e-5a99-aefa-28c249e02e99",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:764af841-72f8-57d4-98de-c6b7e2c2f74e",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5efa4b42-0608-5ae8-a39f-a2476b9628d4",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60280691-465c-523e-b17b-a7c9c1c56ed2",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a139301-ff16-5314-ab16-b4ff283eaaa2",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.50-tuxcare.7 of org.apache.tomcat:tomcat-i18n-ko."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko@9.0.50-tuxcare.7"
    }
  ]
}