{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d384d39a-7ff0-54cf-a35e-5c8d425f2da8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-tribes",
      "version": "9.0.75-tuxcare.1",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:711650f8-c457-5894-ae57-2e3c6affd918",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bcfec01-8839-56f6-b9be-cc686e6f2f5e",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c8d0407-7ad0-56b2-9c06-7bf12a785d71",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df73f51a-8d5c-5274-a628-5e669df41296",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a25a0105-e312-5871-a001-4526dac64123",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d7d4e7f5-a5e9-5e7a-bbec-4ec61fec84f1",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8363fa82-31ff-5795-8ea1-8966a6811999",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:728f452c-9998-5c67-b684-9943dbe55f0b",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4cf1b74-6d8a-5ed3-a459-b43ef0099007",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3b0222f-bb7e-51d9-b479-c0302eafd402",
      "id": "CVE-2023-42794",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42794 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f190afe-1d19-557f-be39-3225b63d62d2",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14f10b22-155d-584e-af7e-57b63e2cf4a7",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b214253e-de77-5ea5-9637-af8571aeff58",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d52e5284-bd7e-5155-869e-169bca423e26",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-46589 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51932886-9d3f-5110-9d75-d1cb6e2ad7fb",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:929c355b-46cc-5ca6-b450-70d8d626b372",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ba12808-15cf-511f-bbd5-ddf17c3bb66e",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ded05180-8c55-5b76-a2a9-b2bbe79fc13f",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f906458-6278-5cdd-b447-10565a63a2a0",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71aa83ee-5b1d-56c1-88d6-f19db4008df6",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea0eb8b0-0086-5e06-bb7b-370019906c00",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a342d7e-5e29-51cf-8589-d986defadefd",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43cfff88-ea0b-5019-9cdb-ed73908c3036",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be5d0f45-294b-5bf8-8bd5-45eb7eec2377",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d64dcc75-ab4c-5f1d-bb42-706bf7baa110",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c84da693-bfb3-5261-83fa-fbc1c02163cd",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d92ecb3-ef28-5bf2-ae3e-3603ac98d5f6",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ef7c825-bfd9-5d4b-9ba4-926a260b2d4b",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48989 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:208866ff-c497-5b48-8597-a65eac84684c",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e657779a-2f93-57de-a2b2-fafde600f08c",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e4a64b-1472-56cd-9904-44b8e6391c84",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6eb38d9-5d06-5a24-97d8-aade6feacc43",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52520 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4dfffb6a-0afa-5000-bd6f-423b051ac11d",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53506 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b9c44f4-5f8f-5355-8ada-5aaf444e06b6",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55668 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04bc543f-bf3f-519e-a738-0acbd0e93f7f",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf783d0d-cf66-5b44-911c-00151c9ec14c",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55754 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0691cfea-bab0-55b3-90b3-470f8caf4187",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61795 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:451a2e06-9360-56e0-99c4-b15f734cc1e4",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b01c86f5-16de-5931-a604-c804b68803eb",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce0e2a6d-bb75-578b-b07b-d1c2123cc5b6",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30fd4897-ea04-5fd6-9272-f5d1fcd45126",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea0177d7-0d0a-5406-9d84-1d1dc22fda33",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:473cd5aa-800e-57f3-9776-09c245f4b1f2",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5415c9b0-9256-5a99-a830-a4181c273abc",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31bdee71-c376-5123-9950-dcf5b8637344",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.75-tuxcare.1"
    }
  ]
}