{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:a36078b8-ed2e-5f9d-9e44-6dad52b104a2", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-tribes", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-tribes", "purl": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c83db790-f888-5388-a016-7a8638137efa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3f7cf2ae-2525-50e1-936a-44684adfc2b7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:acc62990-37c0-5428-8f93-a779a9c2724a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:cd69192c-1db2-5859-bcd0-955622c083c6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e912dc61-0aaf-5222-967f-b2dbf38d3df6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2daffedc-1b56-51ba-bad2-e52f3fc0d33b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e34bff61-ad86-5918-a1c8-dfe891b60f9f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1f1b2d09-22fa-5997-a4cc-8ae23b6a489a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:13046809-64a0-5f12-953e-562e4febbb95", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:98e9e293-9505-54f4-8fec-44728c25212b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b8bcf5c4-7caa-520a-a41d-97a875a06df7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:75b11681-41d7-5d0e-8bdc-7c4ce8203e2d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:73ca8a37-55e6-5e29-8704-c6a592747410", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5085d537-89cc-5390-9a6a-e120e557be99", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5b2c746f-81cc-5639-b04b-263dfd78aa60", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e97c20de-ad9f-5a58-b67a-c80e1e138be0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7ef778af-0330-5754-956c-34d861d40edd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:526d240c-5566-56e3-85ae-18b5871a96d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e01b4545-7008-55a7-b08d-b493fe076a03", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6ecedbb0-f151-5d67-84dc-4139df42238a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4c50aa6d-d233-54fb-95f9-f5251acb31b2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e4e57529-d31d-5e40-8110-4f8b789b1365", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4c334dc9-2360-5033-91a7-9a91827e1dd3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:596d90be-db0b-50f4-898c-52f28bb784fa", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:82ab94b3-bc90-5680-a736-2784e27fc839", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1091529a-703f-5951-8226-d6aa7c77e238", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3e7d6e88-16dd-5e1e-8ddf-afd7089795a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0083fb72-9d7f-5a42-af44-0e49fec64228", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a63086b3-2a51-58ad-b08d-b003fe8985bf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:781b3c6f-0db6-5f82-9731-d4ea0dddb15b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1fca4e5d-8a84-5972-b5ca-8dee7551b82a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:bcb9a2ad-6561-5f27-b514-95b16c9df1cf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7cff17b7-be81-5ec9-ad86-f97db98707de", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:99e544f0-de88-536a-8e48-1a16af386600", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7ef704ad-9e5a-5f88-8dad-67d7122a592d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8e0f6d7c-ba2e-5cfc-80fa-baacd32e4a65", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:842aa352-5f05-5a76-8304-842a24063445", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:0dd16556-646f-5fd6-81d9-a42f56117dfb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:981421c1-33e7-524a-a401-bb6d851a9b91", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2bfc7a8c-f848-5ec9-a8c8-c4c449f0706e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ecc90fc8-2ca0-5b8c-b5c7-c592caa312d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:93d2e777-9243-5cf1-b47e-0f5f5b9c693c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:35672897-4e9f-5a25-ada4-701a92e5b32d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:f7a2310d-b060-58c5-97f4-49f3ecef8aba", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-tribes." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-tribes@10.1.18-tuxcare.8" } ] }