{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ef90345e-c0eb-590d-89f8-a11ef92b3907",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-websocket",
      "version": "9.0.75-tuxcare.1",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:ede6f2df-db91-5b39-aa77-22a74cf4dc60",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75e63787-e5ed-5ccb-970a-86321c9f2af6",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b697ffa-9ce1-5c40-8de5-3b514bff1303",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f371a085-efc2-5967-b433-ab2fd74d30e7",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15d7a1a6-440d-54d4-8e4b-5f4d61a77914",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b3b22b8-56cc-5c35-a777-e2b50a29d272",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bb5da09-ddf7-558f-a3a1-496e5762bc37",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4957fca-83d1-5b74-b575-1d97730ff608",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:865ff87f-2515-5cf4-84f0-413da74831d1",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f108de1-74ca-5fd6-ba30-5e51eb71ae31",
      "id": "CVE-2023-42794",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42794 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e49f836-2a99-519e-af39-5052229c56c7",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5edcd3ee-70aa-5bab-af57-5928a586b918",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f8b6fef7-fd50-5392-95ec-28cb2a2a25ff",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc38567-0929-543a-97b0-7df205b4c077",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-46589 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1677942a-a5b5-53f4-bb0b-473ae3763acc",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9b3ae5c5-ef95-5b18-9377-4107ecbbbc5b",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4726a945-c3b1-585b-b51e-08572934c87e",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abe73ead-84da-5cfc-b6c5-6dff6f12c32d",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f64b22d2-3f18-59f5-9be1-760f2ecaa442",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df614f99-d15c-539d-ad43-34ecb28ad184",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a6451be-7387-5c57-aa0f-b8e26bca841e",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d02a26aa-6a62-568f-9930-e68bd613df67",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c2359a28-eabd-56fc-a4af-7f695ae0d338",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:755e7725-feac-5029-bb57-25cec9479f07",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0542595-7589-5707-a854-673947a859d2",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96ba8a4c-482a-516e-b345-c4adb0e8b676",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd4c386f-8293-560a-9e42-f7b3b56af22b",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f41eb1d0-fd79-525c-8e60-70272fa68628",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48989 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b952d126-88b4-5a88-9e87-ccf61fc93177",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d429b9ad-4be5-50b1-8453-fe4505ef166f",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:520958a3-0a43-5d25-ae3e-cb8cfaa375b2",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52434 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b703f202-1a77-5610-84fc-187818bf28dc",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-52520 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:79f6db7a-9398-55e9-9fd8-eea0283d4532",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-53506 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:038ec8e6-82de-5cc1-bdcf-4d3babca1113",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55668 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f3a5525a-7315-5cd9-bb06-ef486b888edc",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55752 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f382d12-a00f-5313-8bc8-4eb9c38a50f5",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-55754 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fa173b0e-d9a4-50b4-90cf-a0497695740f",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-61795 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:516c74a4-5333-512b-9585-da781fcb691d",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7cbf282a-259a-5239-bc76-7c0c4f232258",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9dd9becb-07fe-58de-b93f-1e411ca6fd9d",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b914204-5269-5807-9a30-8cf6816c2ed1",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b2f8105-67ab-5ea3-88c1-a16602f3fb3f",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:07a5de8d-8b24-56a1-bb70-387c2cac137e",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e9ebc6ae-46dc-5969-bb65-81e12f584b54",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cfca750-d984-50cd-8bbc-99dbcd9417a6",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.75-tuxcare.1 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.1"
    }
  ]
}