{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:a1cea319-01dc-5144-96cb-791b163890a8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-tribes",
      "version": "9.0.87-tuxcare.1",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:f376d893-a269-5d80-864f-5b71fe04212e",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3594f541-fc54-5cd5-9f41-7e0de8043d6b",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2c4b743-05de-5062-9ba8-2fc6aed056ac",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98804125-b47c-5dd8-a6a8-fe9e25cf1e77",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:778aa779-56f4-56ae-981d-36f453d25ea7",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a59890a3-f70e-5a21-9311-204e33d443b4",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7618955-1fa3-5806-9695-0febb772082f",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:17372738-d5a8-5d3d-9129-bf1b8f3e7d99",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0948405e-0c63-5144-811f-fa414a2f67b4",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caf04881-6543-577b-96a0-315f47ac4596",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a227d14-a3e7-51e1-b7e3-cd9ff3d65513",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a174551a-7e55-52bf-b42c-60e999eda38e",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63bb9b5c-c0e3-5776-876a-caa4a3528c38",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-50379 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac25fb3b-c69c-58e2-a36f-d8dbffc02742",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14d9fdc2-34cd-5700-b6aa-2de7bbffcaf1",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c141ca12-d740-542e-bec5-c7b042d8448c",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-56337 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0280f32-af4f-57cf-b1bc-7c9658645e25",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7c5a087-ea8f-5f7c-a8c6-fc83898dffaf",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2afb8c5e-5931-5a35-878e-7ffe0dcbea71",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60f45c01-7e41-5f94-9bc2-531385241278",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b9e277d-22a9-5628-92ff-4930b41cafd2",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48988 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5cf840d6-f13b-5b17-94b4-9b8203621095",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e797e844-86ac-5fd4-9eb2-8e60545b87bf",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bb87c6d-41a3-5ec2-bd89-18a2267b01f5",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16e8048a-0067-5742-90d1-bef1519ee243",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47b6aac3-4e23-560e-b81f-5976b7ea409b",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52520 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6a6fa07-9a71-5fda-b29c-89f1b1f5ceb9",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:00b6f2cb-2708-5b4f-8237-bd707fb42963",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:655dfbdb-6da8-5d84-a1ef-7a529d7a472c",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fc2516a-9317-559e-8b21-c19e01e79da4",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3203942-a80d-53d3-8cdf-d016e6c292b0",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:899702e5-9937-5265-af37-10a04d8d1506",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e334c955-83b0-5110-8ff2-f43dfa5f53b9",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f8b3ff9-e7f7-5807-9017-a1a09ff42c25",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8afd58b3-65f6-5986-af05-f990b29f15f2",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d483282f-6e35-5bdc-823e-b150032871aa",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e3cadf7-9809-54c7-a963-6f3ede834308",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29145 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54309335-bb02-51e2-93b0-fd7cc1e9bcbf",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2efcbda-81dc-5dfb-a8e4-5d21c5f2a094",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0bbdd7e5-9884-5f47-a908-be0443c2d0c5",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7831ad1c-5d7a-509a-8d9c-b2279d8aa0a9",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.87-tuxcare.1 of org.apache.tomcat:tomcat-tribes."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.87-tuxcare.1"
    }
  ]
}