{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:286146e8-62ac-5ab5-a163-16b7714b5504", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-storeconfig", "purl": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-storeconfig", "purl": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:f53ae90f-38ff-57ce-bdac-909dbe4af325", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c44adda8-c16e-51b0-8803-9073ecc05f25", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8aea65a4-1c86-586d-82ca-9b26b5aa5410", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:73925b47-d6bd-5ddc-aaf3-42d0c389e43d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8b2139cb-1f5c-5ce3-a306-c096640ecac4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d60a57e9-05a9-558b-a899-dcf82ddcade1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:01dd491e-00bf-55a6-80ad-85c649046aae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4b8f083d-e439-51a1-9e1a-3ff6ba551a14", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:24b405a9-0ec7-5076-a9a2-7d7f8efa6b0b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4e8a3ca5-a84e-54c1-84d9-1424927a652f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8a114ace-8dee-5ac3-80d9-4aa19ad81c3e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:308b76d4-316a-59dd-923e-1b9a491a40c4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3ded3dfa-80c6-54c3-b449-3105a065b4f4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:34bf419f-bcb7-5248-aa97-1fba8b2b9381", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d6991dee-af1a-54b9-87be-8b618afd11bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:97d5c70b-4c19-5dff-821f-142e9751861f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:310133d6-f791-5cb3-9ac9-02aca64dd2bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7f672403-9cbb-5cd0-873f-2db5552224d1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1842e461-2661-52b5-b10e-b9330179cf4e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:94868afb-e694-5985-a707-a5707b7a0cc4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:93543d9b-c363-5f91-b5f1-f13b809db694", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:16177334-f817-557e-802f-a66e1ce2ab55", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:417b406d-e951-59ca-bb18-4522a72753a3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:059286aa-9c6d-55f7-9450-3b8bd8523a39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:10c0a22b-efd2-5033-bc8c-c30ae86c1333", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:dfddde5d-1c22-56f6-a424-91c582eb6b0e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:12ddb249-38bf-5183-8b47-58f6776f5a2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:24d27127-0f44-5b75-9bb4-d976e1d6fa5b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d9f54d35-f4ba-5938-98af-7891cb0ad620", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:14a445ae-16de-547c-aa7b-75caa343e023", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:549dfa30-08d5-51f9-925a-36a1352072bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6dfd0057-9032-56f6-86dc-9c54d7ec4efb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bf9a7200-d459-545a-a995-198a31cd199d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:494fc5c2-beb1-5a89-bd0e-1ab739862836", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3a423b11-c63f-5ef3-ba86-76eef6534f4b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:29dd4dee-5a56-5558-a8a8-eb3e9791941d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:71f1526e-5837-597a-b9f9-a7edaaf3c91e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:17048013-1159-53e5-a76a-1310fec137d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:014dad22-57d5-544c-874a-3df05e50b2f2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:29e0740b-e8c6-573f-94fc-a29affc022d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0a644915-e661-5365-ad73-230c3c6f2f31", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0ea1a9a1-468f-5fee-a6fe-d9259dbb01b9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ad3161a5-d1e5-5dc9-aa67-d5f53bad8926", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6e75dcb7-fe1b-5fc2-8b02-30ce04dec0a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-storeconfig." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@10.1.18-tuxcare.8" } ] }