{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:b0b7efcb-f655-5f82-bdb2-28a99bf98da7", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-jdbc", "purl": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-jdbc", "purl": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bbd45686-a3d9-5db0-997c-22ae43ccb7b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:daa14078-ed4f-5b19-b84e-04b813401eb8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7eb7d446-f042-5fb7-af24-ee85674542b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c2b68e88-f617-570b-b4e9-2ee90c59ffb6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3714a8fc-25b6-568a-b45f-0654f9836c87", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:eb76cc00-db50-5c5e-bf31-01501763cd7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a64e346e-eb9a-5d3a-b05e-14fbc07a8f1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2bc62437-734f-5708-ba2c-46d302e114b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:04c74049-1492-5317-8d23-70df233f39d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ca405e9f-9055-5d31-a1bb-e63016883c91", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:784738c5-7e06-54eb-934b-ee8429651abb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d2c41c5f-1ec1-5101-a73c-6a7a1b4d4998", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b58b26be-66ef-5c97-b93b-c8ac8029a493", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9b29f497-d30f-5f24-928a-1cc985d4aa3d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b2416d7d-f0f0-5583-9958-5bfb498b0532", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:05d6e1c5-53f9-5154-b4f4-2960edebc12e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d4181175-b42a-543e-a15f-6f69be2e8cdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4a8ae0df-ecc3-5282-a94e-62f38f5f963e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:667a8371-f48e-530e-bd0b-43490ab955e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:93d0d57c-ae69-55db-a8ff-2c7a98c7ceda", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9164e6b0-c9cf-568e-9805-ac1f4ab66cc6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c125b2c8-fffb-54b4-8a60-35a25843a7a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:aa5efc67-bdb8-58c5-84c3-586627ee364c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e7b89b16-8949-5899-8363-b9aa51fbd3e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6e6533a6-48d5-5653-9577-8d6814e2e5d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:61a6c80a-23cd-56f0-96f7-1de5c264463f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4b33fc79-f8ed-5e50-af20-8243f73957a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:448ff96a-a2f7-5d74-a992-18c3f488596d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:027a3c58-8818-5da7-813e-aa8356b50817", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7aa45cd3-44c2-5e73-9b81-90d8fb933f85", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:efe1e31e-5c93-5b3f-8a60-7c39af1309b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:aa858a69-2ccc-5f26-9d2c-4f806213f149", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8fe1a67a-18c5-581f-956c-845b49d7af7d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d13bca4b-729f-5188-9cf4-55c5235a20b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:69a55379-1fb9-5b2e-bfd9-83431d2ec7f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9026625d-3812-56ac-b2a2-40bdbb1cda7f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1bfe3b9c-8241-551f-af0e-58382d6048e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4616d515-3f5e-5cc3-97f5-69712359be43", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:add1a2a4-0008-5aea-821e-7ab2d49e8dfe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3c51e681-fa5e-5d7d-84f7-502fc001c48c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:87614c51-954e-507b-9d02-b6658a37016a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:dc03987b-cbf9-5628-8293-9976289816b4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c386dc8b-9088-5088-8b7e-97407e86559b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1e7b4ec2-9343-5e88-9fdd-fb2ecad26083", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-jdbc." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-jdbc@10.1.18-tuxcare.8" } ] }