{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ac442123-ccfb-57e3-b4ee-377e32a840bd",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-ssi",
      "version": "9.0.46-tuxcare.7",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:310c8041-7372-5c16-b818-8bc4ab0fc285",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd2e85fe-c8c3-53a3-9b12-a17b3ca5ef54",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fef8265a-e27f-5023-8405-dadd8a5435fe",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:632fb4a7-fe57-5ae2-86b8-26307e993d81",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b02033c-0d50-5d00-a555-8de37e737602",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e6551d4-e6f0-5a76-ba13-0f2300734c82",
      "id": "CVE-2021-33037",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f7de0dd-9d6b-5edc-81a4-bda55000cea8",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5e8a1b5-bcd0-5c9e-871f-d2c7e30483e0",
      "id": "CVE-2021-43980",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4ff3e101-533d-56e3-9b98-5eed206348fe",
      "id": "CVE-2022-23181",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b75389c9-1241-58ce-b075-500446ca81c5",
      "id": "CVE-2022-29885",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eb06aa8-a097-5e58-901c-efa3cc1ff24f",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-34305 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:270cf5a3-1d90-5c6a-b436-c7f0a200d87f",
      "id": "CVE-2022-42252",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9221b5a-34bc-53f0-90c6-399fb913314a",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aaf1afc7-c167-50b5-8186-86c322a32741",
      "id": "CVE-2023-24998",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-24998 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:597059e4-c896-5cf4-a8e6-999cce22af9e",
      "id": "CVE-2023-28708",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b07a51ce-f521-5973-84cb-ba4e4438e757",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4441eaba-ed4b-5a89-b753-355df4766922",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e518218-16e8-5ab9-8b60-43a0dc6a8db2",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-44487 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72ed8b84-c2b4-58da-82a3-4864f83ef5b0",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f4d7bf7-1e72-5c4b-bab5-abcc437e7f2a",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46589 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63aebd6a-57d0-5be2-aad6-f9fb8ba4d99d",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b745150-c88c-5cbf-aa80-e6baa8e25cc5",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a07d2d75-b07f-5a72-bfa6-087923e72dad",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-34750 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a893ed1c-9c45-5c07-94e0-f40a20a34545",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e2eff43b-af21-5945-b59c-0d43f516d2e1",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcb315b8-6a66-5309-9b9d-1b3f9ca9ae8c",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fefe3099-0251-59f3-ae26-b37321b6330b",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:926d14e9-849b-5d23-bb82-2cde25ad677d",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8032211-1731-5e27-91a2-5d8a1cffadd2",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3793b666-7f5d-5ec6-9d52-5f09a9bda01f",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4e0bb05-baa4-5495-a196-b7aa045cfc34",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bb20d39c-1bb2-5c4f-bc79-7520de47699a",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04efbd6c-a3f9-59d7-87d0-7a1813f5ef9e",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:82903fbb-5e4e-5cb0-a103-a4a313d0e8d6",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7eb63898-3cf1-5d25-af59-a7b6c389f217",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:430a0d77-82ec-590a-9f4e-0885e81e96cc",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5fd15b75-756f-5f4d-b5ff-06529321e0b3",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dcdb3292-1ba7-5df3-a4a2-f89663dbc244",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed5b3f47-cf25-50e3-8a77-c7bf7390b4f5",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8b5d0a0a-afdd-5296-91e0-56e61ece8429",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:482257af-1973-5e43-b679-4b251f6def77",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b072f644-19ac-5f1e-9f84-aa0bf828025b",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e2eb24a-02c1-5c79-b76c-9d64dcce9864",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83ec6644-9fa1-59fc-ba54-b05d5f85837b",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:659d0590-4e8e-5606-ae2a-7107939e10a3",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d9166cc4-b947-5cfb-9854-d375098bd051",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55da5f3a-ea93-519d-92a8-e4696a80ffb5",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eefaaa5c-81e3-5b3c-8c12-5295140a7ddc",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b8082cc3-3b93-51ca-932d-f7ea9248c9e8",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e8c37da4-c2ef-5305-bba7-965a8693fa86",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71aa93fe-237c-5210-a8e7-3336502acf44",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34486 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b9d7bb0-67e9-5f4d-85a5-1835fbf958b9",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb5e39e9-8204-51f8-b9ce-90fb3ace3ced",
      "id": "CVE-2026-41284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41284 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ecceb7f-6684-5088-b522-ffaa861d45ab",
      "id": "CVE-2026-41293",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41293 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4941a4d0-791f-52a7-a1b1-e7dbb35de894",
      "id": "CVE-2026-42498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42498 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68c7fcdc-2bed-5541-80d6-3861a8753842",
      "id": "CVE-2026-43512",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2183b43a-7fc5-5ca0-90fc-a44c0a46fb43",
      "id": "CVE-2026-43513",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f08c3c53-099f-5a45-a231-d98064e5a396",
      "id": "CVE-2026-43514",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32446f6e-2e7a-5b93-8732-dd64c76b4632",
      "id": "CVE-2026-43515",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43515 affects version 9.0.46-tuxcare.7 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.46-tuxcare.7"
    }
  ]
}