{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:26ecd96a-58ae-5982-a0fb-3b3568df0e61",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-juli",
      "version": "9.0.90-tuxcare.3",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e33892c7-3146-576b-bcc7-3a9122262389",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce89471b-b796-5bcd-a7b4-894ad90b70e5",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aeba2974-f00b-574f-9bb1-ef479fe0abc3",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2020-13943 does not affect version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli. Fix for CVE-202-13943 for this version has been already backported by the original developers, so brunch 9.0.90 is not vulnerable"
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d30067c-e5f5-5a0c-aaf1-86acb07b21e3",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8eff04e-6a26-5223-825d-1074fa6253e1",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db1fe2ef-a3d7-5707-8beb-9bb02687e33d",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee2443db-e666-59d7-8d3b-2df442398299",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a869b532-7ce6-57d3-9e5f-ddfc949dedd2",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:456d2c45-e230-5327-a2d4-881214d15049",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65bc541d-07bf-5e0d-87f3-3574588ce5e4",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df9cb603-134b-56af-ad44-d70ca444a363",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f61d01f4-4dab-54ef-a76b-38b7e5c93e8a",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f384067b-660b-515f-82c7-57f32c1adfeb",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a1234a5-ff62-5452-a43d-a9fd3905e15a",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76477bbc-8c1a-5fea-9fdf-19cbaf19f600",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:966b8694-2e90-5c70-ab42-9f32053670e0",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:938c133f-8482-5824-8286-67a8e8fbbc0e",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31651 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6480c41a-668f-5a6b-97b8-59543231be5b",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4077111-babe-5506-a900-ef8116237559",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5bf731e-76df-56a7-a4ee-e59bbd60d09f",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0ccbd99-a7a3-56e8-88ef-13b18b9c771c",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1384d5f-00df-5fb9-983b-065946d116af",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-49125 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:976435ba-2143-51ce-8284-5aceb9d2b8cb",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68558832-9808-5b9f-abcf-5cc6e76890aa",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79fbd388-a621-5eb9-8cdd-f80860eba6df",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b826dd7b-7382-50e1-b757-5357be9df8c9",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2acfa357-dc09-5410-865e-df14eb148366",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66712dc9-d72c-58d0-b162-b6a9ecdd945d",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:87f08d3f-2481-56f9-b99d-4cbc9bef6638",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ebd15fbc-4eb0-57c5-940d-f46400078c94",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:877d8e65-76cb-57d7-b33b-255384ebe265",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ac59c83-2633-54b6-a99c-6f04d755e978",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9827ec5-86dc-5f5f-a6d3-abfc5f05ce1c",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dea0eca6-2782-5242-be58-a79c26d89ece",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d52f27dd-03f0-5cad-b6e3-6486aae57538",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29145 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11a61691-7f07-5402-8150-d29ff93207f5",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de3b11f3-0b8d-5ed1-9304-43062daa8fc7",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b126cee4-ef47-5876-ad6e-12414961c22c",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32cdda56-e32f-54e2-9146-f524fb4532dd",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.90-tuxcare.3 of org.apache.tomcat:tomcat-juli."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.90-tuxcare.3"
    }
  ]
}