{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f6a74fc9-f5a0-51ab-94c7-0b267cd9380d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-websocket",
      "version": "8.5.100-tuxcare.6",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9e2530ae-afdd-5acc-8d7d-fb300ffe67d1",
      "id": "CVE-2016-0762",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0762 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d675ec53-1ec9-582b-9162-8a3289e59104",
      "id": "CVE-2016-0763",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0763 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39f1f564-8766-5119-aec5-5c17e1272820",
      "id": "CVE-2016-5018",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5018 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:398004fb-b581-53c5-b73c-f2fa1cc34105",
      "id": "CVE-2016-6794",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6794 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc82cde6-a873-528b-9820-36ed4e7f3e9e",
      "id": "CVE-2016-6796",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6796 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f491a7f-05d0-59c4-8072-63b11720cc91",
      "id": "CVE-2016-6797",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6797 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca099868-b1ca-570c-aa1f-b221b69579bc",
      "id": "CVE-2016-6816",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6816 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8afd49d-7b66-51ee-9af2-722abdd9c38c",
      "id": "CVE-2016-6817",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6817 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:95cbf748-2a2f-5892-b303-08219f2d8820",
      "id": "CVE-2016-8745",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8745 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:60fa5720-3855-5be9-aa95-af71ca0f9b9a",
      "id": "CVE-2016-8747",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8747 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:babe26d1-b598-591c-a679-5a5927fcf5f3",
      "id": "CVE-2017-12617",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-12617 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf2bd97b-f784-5690-8fa8-2be7990071e1",
      "id": "CVE-2017-5647",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5647 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d2a440d-904f-51d4-a92a-fd143cdfd99d",
      "id": "CVE-2017-5648",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5648 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e6786249-562c-5db9-84bf-ab5ce85552e2",
      "id": "CVE-2017-5650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5650 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf018c18-83f2-5c04-97af-dfbfde444cff",
      "id": "CVE-2017-5651",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5651 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddffb36a-2334-57e9-b7d7-ec6c4c8def5c",
      "id": "CVE-2017-5664",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-5664 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3786529f-1140-57c7-9312-810e49acaf0d",
      "id": "CVE-2017-7674",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7674 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03e8cb18-6661-5965-88b8-bce908acb4f2",
      "id": "CVE-2017-7675",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7675 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c9a4343-1e5b-5aa9-a1bf-f6e77af01cd3",
      "id": "CVE-2018-1304",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1304 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2a72905-3ce7-5c29-b1df-dd3fa7b60263",
      "id": "CVE-2018-1305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1305 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eed40fdd-940a-5655-a40f-7663b320dc01",
      "id": "CVE-2018-1336",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1336 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f999ddc8-85a0-5d50-8bf2-540743470137",
      "id": "CVE-2018-8014",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8014 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea9a22e2-c90e-532c-aa0c-6d20c6c8a6fc",
      "id": "CVE-2018-8034",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8034 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b910caeb-3ccd-5d99-bed1-8e6b8b1700a1",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7feabeee-1ff9-5a77-b9cb-7996bfbb9b0e",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2e6b50f-dc5c-5a5d-8142-f0d8b53d7921",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:601368ea-cb6c-5438-85ef-47d062359fa5",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat-websocket 8.5.100-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0da4898-298e-5df7-a870-4e26ad11201b",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2828e7ef-eba6-5457-a80b-2a66a9b68a81",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a58bc82-79c1-5252-8b37-c4572e76e45e",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0aef731-61bb-5b7f-91fd-acb6daa7bc48",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a59635e3-12c4-5635-a0f6-5da1d9724bad",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2b564fc-1171-592d-9183-30f23248a705",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39930b42-163c-506a-b9d1-4e93d732e679",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b14baba2-6e59-59e8-9ad9-bc6809cb1d56",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7174dfd8-e723-5348-9197-89fd3c1b99d0",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:673a306e-c0d6-5448-96e0-514f34c639bd",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8e1ecf0f-42a3-50ca-8761-dedbdd148ff2",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038bfa82-1d66-5054-9408-c6bbd9b22701",
      "id": "CVE-2024-52317",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52317 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dceca7df-a8fe-5be5-8b3a-6ad42b167c2f",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-54677 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b88502b8-c141-5d5a-8ecc-3d71d8693e2b",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b874a4de-799f-547f-9e00-c7d1b27af9bb",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:819ac110-2c0b-5f49-98a8-10a8829b14f3",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31f6ddf6-3966-5016-8c4e-da44e8513125",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b43e4b6d-f943-594b-9a96-a7bcc4feee62",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad6f9a8b-0d50-528b-a7fd-1b60d7055451",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f06bef7-5316-554a-be5b-3a7dd588e564",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e5771be6-734d-5b58-92a2-cb998803f68c",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a9f3bb2-c393-5854-bdb1-2445682096d8",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b7279568-7bae-5b66-8732-9f5f481ae0bf",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b199e32-ca90-51ea-b5a5-07e029efa871",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0c2ec6d-5aa3-57da-92b4-0caaf462beb0",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0698ae32-bd58-5c61-a09f-bc2efb7ca495",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:03374dee-8712-54d3-ab14-7c6d8248764f",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bbabe6ce-f3a0-57ea-bea3-27cd35e4d418",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30cee620-2207-5b87-b63e-81de6371d963",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d901bd0-6320-59d6-bc54-0322f2123ef4",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cfb75b5-cd32-5b93-97a1-2771af4badfb",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b4c05462-f9cc-5400-a60b-5da67e04e507",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d5caf5a4-52f5-5265-940b-d22301c217a9",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 8.5.100-tuxcare.6 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@8.5.100-tuxcare.6"
    }
  ]
}