{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:78350efc-0dd1-5db0-b37e-2855bdf76507", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-jaspic-api", "purl": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-jaspic-api", "purl": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c18a0b9b-2c30-5054-a248-517a08eb00b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b4cd9c42-ddfe-568d-a175-ea296707eea1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:74e02dab-7890-5b02-8380-cec626b921dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7a716d0c-fc2c-5a36-8c2e-a9e061f084f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:30f565c7-177b-5051-8027-06496c3d48c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d9067380-578d-55bd-b489-de9f35fc7912", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c7150b9d-221c-5ef4-9848-b47acd70d062", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d46e0cc4-fd4e-59ce-9928-20e65b205f8e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ed362217-7279-5725-8a97-4c475f1f1135", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6d02f572-3e0d-553b-8d02-975c0b1f8362", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:304e6229-4c2f-5bc3-baab-266d400f5699", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fc79c3f7-50c0-5908-aec4-76163de8e7f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:056ff0fa-10c9-5cac-b2d0-e19c16b0dd8d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b8a45a57-03b8-51b7-a14b-3865134852c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0cde9ca9-2942-5855-b657-5e660aa69b79", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4743cc90-b6ad-5049-bf8f-68b7d306dfe4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7d2f333d-3372-5f86-8e5f-d179f418adc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0839e164-52ec-5805-8276-119b16d318fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:460af943-1090-5432-ab1a-d210d2ca4e1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d26d771c-b600-556b-a62f-33a7e5f30add", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:dadd2bd0-46dd-58d9-8876-cdd81cb334c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6ac3a24b-a8ef-572a-a3bf-fdab8b2bbdc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:f87a104d-f957-5cda-9893-e182e4eb2513", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6cbd9826-4894-5290-be65-20b6d5e2f96c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8ef769d5-6030-5d9c-82da-25d4149582f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:98c0e7ef-8f29-52ef-ac94-833e19baa798", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:653e03e8-c968-5eb8-b46f-27002d11e64c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fda1fefa-28b4-5dfa-89db-29e97e98d7ed", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a86be214-f001-5458-8749-1f210fd4364f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e34580d1-fd32-548d-9d84-d13f6385d318", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:80f630cc-76af-5ae3-84f8-7b57779525ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5d4ce764-0c1f-5f6d-9a0d-23b37cf2b168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4bac2fc6-97f0-5892-b1cb-56331398e1b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:da36df39-5eb2-53e2-8277-e1e826eeedcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9ea3ad93-9f39-570d-97ed-813f6e85b11c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9e99a169-c271-51f7-a79f-a3eeae5fb518", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4367c85b-6d50-5cba-8b55-6e70f0a637cc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:21ef5f1d-48ae-5068-8cfd-149e37b45713", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8e2d450c-a380-5b29-86d0-75f3a1f8472d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c13fa7ec-781d-594c-ae3f-8d65aff3fa47", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3cad0fd4-f88e-51a6-9dd6-43f4651502cf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:af6c42f3-7a29-536e-a6c5-1db0b92a563d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2a954a8a-51c0-561f-8d97-dd47e75e337a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6aa7c79c-8f6c-53c2-a997-1f96946e5415", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jaspic-api." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api@10.1.18-tuxcare.8" } ] }