{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:7f1e1cab-d80a-590c-bd52-e56657df09c8", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-el-api", "purl": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-el-api", "purl": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1c032e3e-a6e6-5b4d-a91d-e124ee675766", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1e294592-956d-5c7f-84a9-b61912b7076a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5577ccac-21fd-5098-89e9-4795d21dbf3b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0000982b-9eb6-536d-a6dc-00c401c7eb83", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fc01852c-5b80-52f2-8eed-e4d1ed796444", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:229d3035-e921-5d37-a9f5-ba1ee59c5b34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6374b2e4-9629-58ee-bf25-2a9eebbaadaf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c07895b0-f449-5948-b337-c5333cc22090", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d7508a07-7517-5447-9543-e999eb9a20ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bb4098ee-8bd8-57c2-926d-58d884ebdcd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b7d4692a-5344-59fd-9d3d-1f367bf051cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5bc15575-a8e0-5f99-91c6-c77169c23b3c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:96ecce83-a836-556a-9ce4-569c9a669882", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d3de587c-10ff-56da-b96c-82762572eff7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:def75cd3-6888-5bad-b050-11f4f1680b10", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:651b4668-60fe-53c4-b2cc-9cf5d968d342", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:36aa9ef4-d274-5cc0-9d27-93ce6973df95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2ad5db2b-4fad-5f03-8821-0999fe2dbfff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8fceea5d-2bbd-5e5b-a88f-78878836fe4a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2d4171d7-f5ba-5311-84a7-8966356d4805", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b4ce3122-f503-5468-8c2f-4911fe95d92a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2579ebd9-d3f3-5217-958a-2ff1f94da367", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e4d5f996-b247-56ba-a854-f219ec718cb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:16d877d7-9fa4-5b81-a58f-e3d28d03ea55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4709bda1-225b-5159-ac54-58130ca73fbc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:380b3be1-ee8c-55b7-a22e-90a9af1af134", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:949e1a0e-8e8c-5086-870c-aeaf9a9437a7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c0c706bd-365d-52b2-921b-92f07d2f8a59", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0a7f3096-6e7e-5a7f-80f0-cfd293576a24", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:63f224fd-f3a2-58f7-9259-cafe13485c38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:37c7e536-151e-5079-93f8-0dda8bef1656", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4a715d71-2ebe-5bc5-87c0-cbc74522ad72", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:441c7677-0046-508c-82bb-2e921309f21a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:162405aa-5458-5363-a814-e7a0bf3f6853", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8bad78c3-093d-5457-b9a1-d4b905bf0894", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:abb34a95-9e8f-5bb4-98fd-3ed2b0f1654f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ed89ac6b-a879-5a64-b8b3-5238c1b0b38d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9ac425b0-89ac-51ad-8c2d-4e819c2f0781", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:68f6b762-0842-5e82-a802-ccc13611ca98", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:cc15a935-ff1e-5ba1-9f73-abefbe8a4b37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8808a888-3bfa-5381-a152-46ec068a753a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:30e32d1a-d694-59e2-8982-6056d0e271c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ea796311-72c3-5773-be9f-9d0dbc3d44da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:25f76be1-1975-5c92-a88a-bd33bce17d60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-el-api." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.8" } ] }