{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:70dca808-9f9c-5f6a-8677-86d836d6a565",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-websocket",
      "version": "9.0.75-tuxcare.3",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:e74faaf8-143e-5b9c-b8e1-4c4e312dc664",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23388090-e551-57d8-9b94-207520488abf",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:826eccd6-6e47-51da-8b5f-fd516bbc2429",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16efe269-a891-55f6-8944-dae4d53da07f",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88946da7-fce6-5425-820f-d7f6b687400d",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:05156780-3f3c-5e69-846f-682f02ab3994",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e11afc4b-d379-5613-ab04-7aad4cb620ab",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b34b0658-bd20-51e3-ba65-36025e71ef19",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e23ed5d-7c8d-52e9-ac38-2b12bb9ef50b",
      "id": "CVE-2023-41080",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:424ddae6-62fe-51f4-8d0f-be5581412592",
      "id": "CVE-2023-42794",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42794 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:531a8067-67e0-5550-8bb6-ec5becba2b6b",
      "id": "CVE-2023-42795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14f9c0e1-f541-5c08-93c0-039404e43494",
      "id": "CVE-2023-44487",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8ab9eba-4123-5619-8164-c636077395fb",
      "id": "CVE-2023-45648",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:311de547-90c3-5f0c-9910-05829f927fd1",
      "id": "CVE-2023-46589",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-46589 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b12fd189-c9f3-58ab-a472-23235ecfcb1f",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23672 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b4afa48-f5b9-5148-b47b-2030253120e0",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:743e7501-9a12-52e8-a002-507c65a87b6f",
      "id": "CVE-2024-34750",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:51f4a400-c715-5511-8d49-ad13d65e45f0",
      "id": "CVE-2024-38286",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ccd8f09-dac8-5780-af2d-bb88cafcf879",
      "id": "CVE-2024-50379",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92396609-9b3e-51d3-99f5-6132ca724871",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:baf3a42a-4c89-5c3b-bc6b-c3ea7552a8db",
      "id": "CVE-2024-54677",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a9ca1f65-5889-548b-8955-18553f9f1932",
      "id": "CVE-2024-56337",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2cef222-5ae3-539e-8478-6b8ad26a8a5d",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e25221f-2b36-52ff-8aee-8ca924ffaf2c",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-31650 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5344154c-3749-5a46-a85e-6fa7aeec4205",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:32c2462d-22fc-5a52-b5f1-623a2b7c6401",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4a284b1-048e-5dce-93d5-5f0d4e74ff78",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c496f0ee-c5b9-500f-84a8-85980ff79883",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33a05e5a-cb5e-5b38-bff7-8c2b2cb70f93",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5300bdb6-0011-52b7-8ace-ca9f117fb405",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:92cd3a00-ca68-5b33-a336-1885520386b1",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef2878ee-33c7-5bb3-8f4a-d6ae3ffe66b0",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61b16c6a-ed69-538d-9377-5d501d2c34f8",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4da05b7d-ca50-5dc5-ac06-f3577449e99d",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a598bab-45a8-5c95-8916-088de6d69449",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8014ee15-267d-5580-a9cb-7e4a0535e492",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:155f261b-69c3-5202-a0c4-e913d9d7d2d8",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4280f9d5-cc6f-5f73-8110-209a3b7e2481",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9753ea73-cc4e-54fd-ac1e-9b4db5c188cf",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24733 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f52d7f34-5906-5364-a3a8-7c45b74ae0a6",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35e4add2-fd96-5acb-8a01-54d19a9315b9",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-25854 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:314531d0-3b42-56d6-9edb-b1a2a57588b5",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29146 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9752443b-e549-5db5-8acd-3c4ba647a4d9",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f89ce82a-bccf-5e5a-b2d4-44aab772c307",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34483 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:824ad2c7-1794-53d6-a2db-4bbcd907a5cf",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.75-tuxcare.3 of org.apache.tomcat:tomcat-websocket."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket@9.0.75-tuxcare.3"
    }
  ]
}