{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2bbeebfc-f81a-56fa-892f-a7df5ed246cf", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-util", "purl": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-util", "purl": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:770c7f87-d5ce-5c8e-bcc3-6186905aa1c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:298dbcc3-d686-5c6e-971a-6bced0249e01", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8fe595c0-a9c1-5a76-b8ce-529713ef2835", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:937b9b2b-6d2d-5a1a-bfb3-accbccd28962", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b368d54f-bc0b-5c0a-bcbf-61fc79dc3275", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d8a297c4-9b5c-5347-8d1b-75e70e1c4cfb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:08f8db3b-2b2b-5bc2-9a17-206ab76f0083", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ba99fa35-938e-5a97-90a2-e33413b471dd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c1db2750-5e63-5744-ab47-29d9268743e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e6ec2b09-4528-5b23-b6ab-05944e3eb2d0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3e17896b-8594-5550-8c3e-d6b4462f1fa7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2c18542a-3e1c-5875-8332-e246771affc1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:00f23cee-b055-5fd6-b421-ea1770321b86", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a81dee56-afbe-57d1-a819-cec36912165e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:56eecf96-384c-5999-b4fb-06bfae75fed9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d75916c4-0fbd-5b3a-a1f9-b24fb5d2c089", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5f8095db-96eb-5327-9ea0-7e2bfdd7db66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:07fede7f-3aca-5eaa-b681-7a2aca8eb5c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:27f532db-bd5f-58b9-9201-d2c53e2b0bff", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4a0fa9d2-9754-5d27-be02-f3e9ac5f454b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:14cdf0c8-ee0e-5afb-96fe-5462c963f2f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:7d55eb4b-8de8-5e5b-84ab-ef7ee6cacdd2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:33d523ec-e944-5f82-911f-6680eee84870", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:3793ec69-f966-56a5-9c13-94e436d489f1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6c84e074-fab3-5d25-a214-891256b5c38c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a190e1c7-2a0b-5fc2-8f90-3271e8337672", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9381dbcc-56ac-56b1-af43-06092e47a482", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:956650fc-1b82-56f3-a8bf-44ffa351d6c3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:67ccbb3c-c894-5f00-b9cd-29b9780f6b66", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:79afe77b-35d7-5a8f-8593-f86885156a04", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:71e7dbeb-731b-5ad4-9136-f86c6b202521", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e089584c-9cc4-5072-a664-9701a6dddd34", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:56f7a7a7-598f-5c63-8f70-2ff7f6ba73d2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:05363357-0045-51a7-ac94-144e4eff6836", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6d4b0e8d-36bd-5a54-9edf-8ccf7140d994", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4a588ae7-011b-5a76-aa31-6c54bb9e31d5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a5f52f81-6862-5b14-9cf2-6b4e41b3b8e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:2c950ef6-84c2-5ce2-8bd9-a5a6c2a30565", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ef5e2428-22dc-5663-b8bc-0f0b52454f3b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b659d83c-dff1-54f9-9a45-1acce532c2e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:173043da-2d27-5524-9bb5-57f987e7af11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6f4fac34-16a4-5b50-9eb4-070f5b095913", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6fb3fee2-7ee9-5f00-a170-83316c7a3e8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:740f6970-d594-51bf-ad08-dd3821fb268e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-util." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-util@10.1.18-tuxcare.8" } ] }