{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:94aa9999-4715-52e1-8842-d422710ed3d0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-juli", "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-juli", "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a2d15854-f2c3-5535-8eaa-cb34436582c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:125b6974-b9eb-5b9d-8f78-7147ab32cc08", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:152df2b6-a5c3-51b9-ad7c-9ae77beb21de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bf2caaea-79e9-5e0e-bc85-75a958801d96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:46af10f7-4ddb-5ac6-9c32-5eddbd61fb6e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8d3ab1ce-9e3a-5dbd-a16a-1c9ffdf731da", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fea5d59b-56e7-56e8-a703-ebe61fc8f771", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b341ea3c-ee16-5845-805a-f8f7a6fefb8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fae40fad-0bac-5f30-ab21-d71c0946d904", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a6d23e07-711b-561d-84a6-bb206800f538", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:35bb2327-754b-5c55-9c52-1400be03effe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2a89ae4b-7300-5e84-bb1a-9d96296ea2b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5ef27caf-46b0-5030-8cf9-4162921b695c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b15534a5-87d6-56bb-85d6-c578cf128aa6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:28370b2c-cf05-5000-ad13-8d9cdbc2e0bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7b39b00f-1a40-5ff4-8c6b-f0c65ebca840", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ed8b8761-ec24-5681-a482-177dbfda9ff6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:06df392c-4069-5e49-813f-9829c00fca26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b333cb6b-ddc3-50ce-95cf-87a2a98a1d1a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:469714c4-c306-516d-aa40-0a1624de01c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fc8f2f54-1c22-5942-99d7-dee1156b98f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8add52d4-680f-51e4-b038-01aea4673ba0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:29a2bccc-85e3-561b-a490-818669edfbca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d3108f26-3a64-56d6-9534-7174f0c6313c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2fa46c8e-64c7-5af7-801f-f9c9a60690f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b5dec4e6-e29a-5fad-a9f4-5eb952f290ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8239d3db-cb3f-5014-9027-2bf2ce526f04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:85901538-517b-5869-97bd-d734c306e9a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6155554b-25c6-501b-b608-aaff246db7c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9a2f7dc9-fa52-55bd-89b6-901aee40627f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6c8d6b83-8eca-5a7f-9266-82e8116940fe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9ccec045-7fa5-5eb0-8405-f375192d2008", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0e6ae0c8-22c5-5b0b-b937-988e938b53ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:cc6f39c9-312b-5387-b654-bb61a09c23d4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:56dfbd5b-139f-5005-a5a9-b35c8b54e308", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bc7de277-6444-5e3c-a1fe-e53830aac7ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c78cd49a-86df-54ab-be24-9f69dd5ab74a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0597bde3-380f-52d4-85cc-24384c82295b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1c76ca09-1f1f-5e9b-8ec7-8fea3fefa841", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a281d1d5-8b5e-50a4-8bb9-3e25275f8a54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9baaf36d-8d28-5ef0-b5d6-15ca55d9837b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4840e386-e210-5dd9-8426-34ccf7fd181b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6ecc0c53-cbc9-5fb3-a3e4-bd6483286487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e7bdc8f6-be2d-5183-b506-2b5aded4546c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-juli." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.8" } ] }