{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:76abb5aa-5afa-5066-b926-f47358eeb520",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-i18n-zh-CN",
      "version": "9.0.100-tuxcare.2",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2aed3463-f7dc-53c3-b689-7e485b7ed8e1",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dedfedd-b125-560f-af64-aa3fe6ab5918",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f81e3fc2-fa34-5e04-86e5-7963a46f7576",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d490d3e9-842e-5bc1-8b3e-720bf9a4d972",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c044ed42-741e-5d75-baf7-28eea7317607",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0470a154-8a78-5861-8b5e-1683633cf567",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3733e94-6fc0-52a5-94bb-69ba65f268e9",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cedb8093-4ea2-56fb-a81b-dc9d8e8aae42",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1687dbdf-e202-5a49-96fc-91ea21113640",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e5e894e-d34b-5f0a-b39d-5807dcc636ce",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ad71e92-2875-5073-8831-7feb7efd9029",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-52316 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b3512e7-396a-5869-a459-4b99a307d52a",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:793a90d9-7b5c-5244-ac09-3919cd8215e8",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e866935d-ea13-5052-b48b-761cacbbd07c",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5db09966-e21c-5e44-8cf3-74b0c7d1af3c",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21767850-fa62-5e6b-88a8-ec1ad1e7c335",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edd8630c-fa59-59fb-aee6-d96a52acfc1b",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b020375-bd39-533f-98d0-982b40bb0b71",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:340a24d1-31ed-59a2-b662-0b49f4d8a5ad",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5838492-61d2-5d85-ac07-aacf6b6ba535",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22aa19a8-940a-56df-8671-34f80ddcc21c",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dfbf7ff-28b5-58ed-a18d-c52b45d90bbb",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fc18552e-8356-5667-9f3c-d58cfea47550",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:36d52b41-33d5-5e33-8970-d2e313ba9d18",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0861f9fa-7c6e-5895-94b6-d223e9b6db89",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aed8bdb9-baf8-5f15-91ed-d5cc77f5c275",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d1da611-06cc-5ccd-9bc8-595d23fabb81",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7666556f-c95d-510b-b718-510dd1f2b46f",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c76757c-4d27-5c16-90db-b18763d3d002",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b7681dc-e8c1-58c6-917e-6b367d30bef1",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e06e16b1-b815-50fd-bb98-fc123d85e4d1",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29145 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65a27f70-8c5e-5dff-adb1-a8c969e584c1",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:201b52a9-4343-5457-9a0e-98599d5b4c9d",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a3aa855-06e0-556b-8eba-99fe119f7ba5",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a536ef5-797c-5508-b058-ad8724d9310f",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97917ccf-1915-541b-8d86-ab0d581a239c",
      "id": "CVE-2026-34500",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34500 affects version 9.0.100-tuxcare.2 of org.apache.tomcat:tomcat-i18n-zh-CN."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@9.0.100-tuxcare.2"
    }
  ]
}