{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:dbd05795-b065-542f-ac4a-46ecbb16319e", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-jasper", "purl": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-jasper", "purl": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:69634877-1b03-5351-9f27-5c5eed13dc86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:439ab11f-bbb2-5380-94bd-d2492fa16114", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:aa5dc88c-1095-5fc9-b474-7b0720d609a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:508d4db2-a52a-5d52-8687-58573c530a7c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ff239984-1b85-5ee5-b29c-f1dbeb23f31c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ee47689a-29f7-5917-9db0-6a0e6446cbd9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:19254f59-f568-55a9-9f06-c1848f3ee8dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5fa31cfe-2283-5a55-b56f-eb49fc126867", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0e63f028-92aa-5ac8-884b-93675a32ba65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:73af7f82-0d77-53d9-84bc-f1bb3ca32101", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:13411003-ec5f-5f08-bd59-b4d9d4b9f960", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:851c5797-e7c8-5c15-a23a-3032d694f889", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:eab6bac4-104d-587a-a4c1-e2ad439d0a29", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fa04f04e-8a43-5030-a37e-ac60aceb330d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:10cfc695-3e6f-5fd3-b2d3-29573b95f2a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b5af16ea-97a5-5761-905d-e685b5e578d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:04e2b628-e030-5f16-b5e7-9f64e3d03a77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7014ad47-80a1-547e-856a-04be098ad708", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:98d1044a-3e3c-58e2-8ebe-eab9bf9b04e3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ff3b7ef4-05c3-5d23-9975-0466e7c49731", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0d6fbc2d-2a1e-5d1a-9c0f-a3e78b3bce0f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:648ce7cb-6615-5027-8888-c02aa4ac9f2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1767e04d-0c85-52b6-a1c8-3b85c180c450", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:efa9c3d4-2d69-575f-ab54-8a3bfedd4fc9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:662dbbda-9bba-508f-a07f-92f28074baee", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b24bd8e0-3f4f-5a09-82d6-3bb8fc2bbb65", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:add4b014-7d62-53fc-8227-b7645120d17e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b37000dd-c33b-5f5f-97dc-8aa77ab4ded5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8d4d7396-bb9b-5c27-9947-1970cb09865c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c28c884c-e6cd-5ff4-9e42-141e8e9390bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:77473c7d-d811-58b2-8af1-d3a70b7c5d69", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d9b66cb2-4a3c-533d-90e9-60ae8d8ac44e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ae375c0a-f4ef-5e0a-a675-53e0b6cfd16a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:04c727ba-65b2-5f75-9167-f334a8aac5e2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d873b472-c3e5-511a-865f-a59807fa1078", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7bea75fd-44af-53d7-a2fa-7d90744950bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ad5f86ee-aa2a-5c76-8ba0-087f40924cde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8b2e6a28-4019-55ef-a9be-4ce30adb2817", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e8cc8e92-0155-515f-8e5c-efe171afc5bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:90c1bca2-2066-57b9-91e3-5c60d948eccb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:68e3e079-c8c0-5883-893e-712dfd181901", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ac2ac235-ac5c-520d-b6db-fe634453bd48", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2713634c-af2f-5efa-999b-972352bcfc30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:167f0000-ffb7-5668-9807-c619a63a5ec3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jasper." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jasper@10.1.18-tuxcare.8" } ] }