{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:03b4dd49-91ec-58bf-9c7c-4383a51f096b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-ssi", "purl": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-ssi", "purl": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ad88ce95-fe7a-57a9-b72e-061e0f681876", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:61561210-ac87-5f3f-b3bb-2e87a1a353f8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a9f62cac-9b89-501b-923e-0ad551022f41", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:53a0ecc4-1bde-552a-a171-391683281ae5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6a05f5ff-b2ba-560f-9328-e788eeaf2c63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7b728fbb-e48d-518d-93d0-8a7d45ba6beb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c77a1a3c-0990-57db-9965-2bf16a448d22", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:cdd761ac-8034-5ce0-a3ed-c9864346e80d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c31cff92-be82-54f7-88e8-5d544c3f4335", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:382bcf6f-e2c5-5163-8053-6fc0cb46283b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bbdb74dd-7488-5aaf-8473-6f93590605b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:085e71d8-931d-5135-a70f-b46e30dde0b6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b8e8a6df-8b7c-592b-a7b3-9eb6640c7fba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:37e370a0-63f3-5e67-96c6-a9b13e552e74", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fdbcbf93-9002-581b-90f7-a067f1654982", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:98583d49-dc2c-5b96-9b08-5d05fe1bfbdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c5f2ba7d-bb10-5190-b458-041fcce91e3a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e7d8f7ac-408d-535a-ae3e-5bc28fab74b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d5aab848-b0fe-5e9e-be9f-ac8c3a5702d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e2afdd0b-503d-5547-a26d-7ec808848cd0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4dd6bd37-819b-5766-a46d-f576de9bcc26", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e56c2953-77e6-5c65-a5ba-02780517c5ef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3a0728e8-8696-5874-9a8a-8984d5790abc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:68332d9c-196e-5abe-b3ce-674859ce258d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e7604d94-d7c8-559a-bbc7-b637bfea780d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ea0a309b-1e5f-577d-9760-9b82303d8dac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e9462ec9-3c3f-5125-bebd-8b947030439c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:870855ce-ca34-5d64-bb08-ddab9a8dd558", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:63926f2c-0c3e-59bf-af98-f0de03a567ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fa780871-2539-5c1a-9199-6a385cbc96bf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:34bc5159-6b22-5c8e-aa39-6360cb5611b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:97c33057-458b-5e49-986c-e91dbe5c0a93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:afe1ff8f-6f52-5ec2-b464-96dd81ecd83c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5ad3da0f-0f5e-5d93-9996-d98b453d19fb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:fbf1723c-f19c-5a56-bcd8-a04d3ec039b1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c45f7a30-7a44-59ca-b4e9-f22872ca7b1f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:70034610-35f3-5d66-89a2-c02a93e0b8c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bd4d7edf-a7c5-5638-b197-db83bcae7507", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b66b8ba5-4099-5d63-ba84-4ffcdfd1337c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:dc9486b8-254a-5403-a277-92393d2de889", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3b70f395-8586-5299-ac67-2a93bdd8cd96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:94a8502f-a9ee-5a1e-acc4-9af920e1ed96", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:63b80bde-ad7d-5c35-938f-3b2a4b2fab6c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:74988103-c265-53db-8663-78748cc10033", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-ssi." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@10.1.18-tuxcare.8" } ] }