{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ba3a58e9-b53f-54a1-a6d8-ee4c22990aec",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-juli",
      "version": "9.0.50-tuxcare.6",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:011b9b5f-8091-5ecc-816b-52dcea0a96b5",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0a97b5a8-fb5d-5969-8a81-c8fcb9fe91da",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04845c04-d0c2-5d44-8ffc-8dd5c8accbae",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15cb75d7-5eb8-5ed8-85a1-2d7d9fd2f442",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4dbdbf3-4b60-5bb2-9445-87f64a8c8313",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f430aff-75ca-5336-b01f-a237bd86706c",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7124d589-6fb3-5243-84c8-82d8f65549c1",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2378897c-5c0d-5c59-b033-74c1320b7b9e",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:74acb6f1-82e0-5e8b-a3fe-49d122de4dbb",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-29885 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f19fc5c-5b0d-54f0-b91d-04b9db8e2e1c",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1d67e53-71c9-564e-8599-ff0fd620dee1",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92ea169b-db55-512d-89d3-bca496e5e994",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6827b8b9-2f02-54bc-8b55-caeaf33ab69e",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:058b0d55-2922-5faf-8e35-00ace2386399",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60fb719a-038c-58a9-983a-4c3811b69de2",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f74080f9-cfc4-57d6-b5c5-e2f979d18465",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:406b3714-e609-5966-826a-d0086240f626",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f396fea8-cc1e-53b4-8bf3-45ea511380cc",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c32c0a37-0f29-52da-a4e0-89cc35f99c99",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46589 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9488cfbf-82f3-53a5-a29f-8775620992ed",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01d3ce98-16b5-5c38-af49-729fce58cd8f",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17ee25ad-e2ae-5fc0-8efa-24ae57c7040c",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f40c2ac8-9a33-548a-9df2-666c266547c1",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59efdcd7-b1f9-53db-b061-17f2d56ea7d2",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ec546a4-a8d9-5817-b7cb-b895e77a9171",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:127834ff-31b6-5dcc-9fa9-f68446a4f120",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:356cacb6-a182-5653-b032-8e8dcf380528",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f6ca2a9-6efb-5760-812c-3e92280d4980",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1eae5464-26cb-5261-a9f3-ccd8397507d2",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:778aa5ce-6a44-5ef7-a0c2-ccfa6a75d4ed",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3cfab7f1-6f8b-5101-970f-c52c0c9bc35d",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c82ee57a-393e-5e47-a7d1-b3cb9654d7a3",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87ce5519-84aa-519e-90f5-5cc6bb5aee24",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48989 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edbb98f0-9552-5d8e-8712-e5d3b32dc1f8",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0eca2e6-3a80-5e1f-bac7-4a15b3fe10c4",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d76d470f-0b7f-5903-93c9-b4036d07c79a",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d01e0ddb-1093-5fdd-a74a-ad25b32a1666",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a6067c-b9be-5d13-a8de-f39bfd51cc68",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a90d4c33-1c37-56a1-b9a0-997f186c08b7",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a62d5bf5-1cc7-5322-881a-1c0947babc12",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fd2e113-1e19-5388-bf5f-78245c45986b",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f4b28d8-9ed4-5a8b-b71a-880ebd52657c",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e03764f-d3b7-5abc-b4e7-4f09aff12266",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba67f2d3-3a0a-5a81-8c3d-fc1886b3f704",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca678128-aa52-5535-844b-d22b500b24f5",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:38c9262e-d8b2-5f13-911a-cb4dad6d14bb",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6192a9b1-bcbb-593a-ad1d-e6ad1502e3cd",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bacb7b9-bfaa-58a2-9a57-320881cd3ef2",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0d5e25d-9cfb-5799-80fc-e84dc1a05c7d",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bbec2e6-8335-5a28-8264-7f08c737da88",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.50-tuxcare.6 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.50-tuxcare.6"
    }
  ]
}