{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:54ac9876-36c9-515f-9612-f9da319319a1", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-coyote", "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-coyote", "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:67b70817-3fb1-59d1-a13e-0d49c6735620", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:cac8f1bf-744e-5d13-86e3-57af922af887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:072294a5-ed09-5160-a99b-aae7d1aa294c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a5861ba6-2472-5bb9-ac47-1ecc0df764a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c0eb02ff-1492-584c-83f3-5dcdc2aead7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:466e93c7-2c50-5e44-ab68-71f75345325f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d21483ba-9841-5ef6-97cd-5b71f4927a08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:29fb1e50-239b-5289-9b09-c6f137d1599d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:065c5c00-c200-5bf2-a81f-f6214018da4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c543bf95-5a3e-53d7-b746-493f8ec236b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4e3a4cf0-20d6-572f-9a97-8ccdac399374", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:64757f8a-71c1-54e2-86be-84a9e43f78b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0bd7d0b7-f450-5bb2-a9b2-c58b8cb2b341", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e042040b-3c9f-5f3d-a140-3038f652a2a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2ed55482-5c08-5f66-872a-c34b5c5d2eae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:64c7a851-9bab-5a12-a020-52c0f62aa914", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a684da37-cd32-5d1a-beab-a449d40bbb8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8ef012b2-186c-5335-b17d-91058ca043ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a6884bf1-605c-520d-99a7-85e6d6c9180b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9cd7f370-2f81-55e2-bea8-74113c62b56b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d4d9fb1e-a8dd-5f9b-aab2-00f6fa8d7744", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:63f7e106-5a30-53c9-88f7-369c89d37b22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:46f90406-ec67-5ab8-bfb4-f62df65d9346", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d5ee6197-b7fa-52b5-bfc6-004c3cb90bb4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:207ceb5f-d62b-52cc-a4c4-3c827d718449", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:13600d11-96eb-58d8-9892-5c259dc588d5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:f824f3ca-1b60-5fb9-938e-83082260b5e7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:36636443-a243-5bfb-954f-e7bad9ff0d11", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1607353a-f72a-51e5-9ed9-9832939bd397", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:722c6117-aa67-5c85-ad16-af7c080bf24f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0c2fbcaf-3036-52b0-8426-24bf783b38d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e2656667-b770-564c-a022-c6705c742123", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:dfd90822-1c42-5ef2-af69-6ff4ec222895", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9bf5df5a-f3b3-5968-8fc8-3f292b472f17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:82f77084-cee8-5bf5-869f-f5a56849285c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:89f407ea-a9df-5545-87b3-678fc8ac2d2e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:745c8fe2-589c-5cb3-8db5-7958201b25bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2550c3a1-366f-5009-b097-f4ca0cd68018", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a9e5378d-d033-5210-8968-ea49a9b22f79", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3795b822-f725-5aaf-b153-e81774775eae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:75ac2712-a45c-5611-b411-ab4af0a2d971", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:95af7783-84e5-5fea-b8f1-fae6a73b83d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e4439395-e416-5a19-a7e0-d3e71186caee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6f064955-949c-5324-bfd7-908a5fc35484", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-coyote." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.18-tuxcare.8" } ] }