{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5d9e6e7f-933b-51c9-b538-6642124d64a6",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-util-scan",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8",
      "version": "10.1.18-tuxcare.8",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-util-scan",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "10.1.18"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-23672",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:38177d62-e241-5c11-b113-2c5638bf8321",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2024-24549",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4929a852-2fc3-5e9e-96b1-2d752252c805",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2024-34750",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b2a11e9e-562f-5693-9096-d1b7cd4230d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2024-38286",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4b61d344-6bb2-5ae7-bf1f-6c0ad6f89c3e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2024-50379",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8d7747f9-2db7-5ef1-82a0-2379efda7f22",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2024-52316",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:04e6e593-05cb-5c65-bf01-f89253419e66",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2024-54677",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1a0d1e15-2c26-544a-bca4-fdd03a8d8c17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2024-56337",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6b0ba701-59e0-574c-b56d-baa8070818a4",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-24813",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1784893a-6eb1-5c7c-a751-d0edd4e61196",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-31650",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:38d17c69-008f-5ecb-b8f9-9bbba094f42b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-31651",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7112fb1e-6537-5554-95af-99b962724b2a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-46701",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:388bf963-2ec3-5b7d-9909-ab417249c331",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-48988",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7e3072b3-7cf8-5876-8f9c-8ab4cb5e5746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-48989",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e08ad27d-e186-511d-8ddd-b035dfdedf0e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-49124",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:df1f59dc-1781-505c-a8b1-2cf7d300fe69",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-49125",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:441d48c6-126c-51c8-b982-a4cf80ccf91d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-52520",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:95423daf-5202-5973-891e-c018cb92f6f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-53506",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8ebcac6e-1bb0-5518-abc5-737d2754e736",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-55668",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1a8797a2-ad7b-5d68-9230-c478179fbb8f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-55752",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:44cc958c-7368-55bc-8858-46404cf0dba0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-55754",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:955f5598-3257-5d15-a735-f1695f999a56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-61795",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3b8cc870-10fb-5f7b-9943-0fd4a91e4cce",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2025-66614",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:aab415c2-c4d9-52b4-a882-e273fb188bb6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-24733",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:40f60c22-35f4-5224-9109-b5f87eef815c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-24734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a961fd34-5d9f-56ac-8608-48f7842f5ee0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-24880",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:73450790-9857-56d3-a9c7-e515b7b2a47e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-25854",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a1b70ae5-45aa-5b42-bc95-488b91d2701f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-29145",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:94dfe0a5-f2c0-528b-9572-9abb862d7cd1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-29146",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:80e612ab-0408-5f98-838b-1b6a0f65b0a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-32990",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:382da8e6-0fda-55d2-bd84-6b4d90750d14",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-34483",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c51d59ce-c654-5ab3-96a7-e7eb8e4915a5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-34486",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f206f547-70d9-5fbe-a270-830cb5d09e70",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-34487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e310816c-2ab5-558d-be06-41b087940ee7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-41284",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:268a3ffe-69db-572d-b970-9d3fda445590",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-41293",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:af6b7ec4-76f3-596d-af12-602fdba9eed1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-42498",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b41322fb-6bcb-565d-b5d2-6b1946f3554d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-43512",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5599026b-2de6-5f32-93e0-4aba3fc09a76",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-43513",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5964257b-352f-523b-8023-072734a6395b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-43514",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f4973724-8bad-55ad-ab61-afe2beaea5ff",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-43515",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a99931d8-23ca-5989-86b0-f47465e26e07",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-53434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:e64ec2cf-8034-50f5-96d5-5c785827772d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-65182",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:670af187-207d-579a-9200-9a37ed3379d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-65905",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:97a97194-e44d-5ac0-ba44-f0bfa52d7ab5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    },
    {
      "id": "CVE-2026-68525",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a4063321-e4b7-57b0-bd5b-6005cfb1e6df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util-scan."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-util-scan@10.1.18-tuxcare.8"
    }
  ]
}