{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:823e847c-fc1a-597b-9219-272f5e926a03", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-websocket-client-api", "purl": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8", "version": "10.1.18-tuxcare.8", "pedigree": { "ancestors": [ { "name": "tomcat-websocket-client-api", "purl": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18", "type": "library", "group": "org.apache.tomcat", "version": "10.1.18" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2024-23672", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:412406c7-2293-5135-9be8-1fa03c39eeef", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:734f3b7b-e759-5571-8a03-5db79fb8fa17", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:538c1c20-2ebb-5960-9d0e-583cdd9c470f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8b80b333-70c1-5610-9242-861084cf2a50", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4d0ba28d-020e-5edc-9cf6-01f2f4ffe134", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:424ba865-a031-517e-9907-1b77cc3f2306", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6e1a87d7-d740-5ed9-8672-e65861281e51", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b83415ad-0ccf-55c8-93a1-47c36e20338a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:8e4729d0-fa4e-5609-a43d-619eedf17098", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:414a514b-cf1b-5a6b-8d0f-bf9906c4bbfe", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d1eb9f6b-9323-5d17-ac94-5798adfca6c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:6e95acee-59cb-5cd8-9011-ead0fdde2cdf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:961e5a56-0d68-59cc-93e6-0fafbab9307f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:183ab687-c037-5e1a-afde-83b9d091b2e9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5101195a-5dd0-5b5e-90e5-f612a23c503c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:69cef2f3-01cf-5d7d-a0f0-07047f2d8f00", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ee04ccb0-4046-5d41-861c-cb2ec44eb055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:c9dc6560-008e-5e14-8071-441fce284caf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:97857841-2b69-5c5e-a311-e101fd1bc63b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:06737939-cf88-5e24-b0e3-8d3cad1561a6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4bc09a8f-3d40-53bc-90c9-2b2765211d12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:67244300-0fa2-5c0c-b6cd-c3f8ed4a456a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e365692a-8d6c-5ff5-9525-3c6940a52c02", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e1d6b290-0b41-5412-9fa0-718d17bedf5d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b8de9ccc-ad99-5748-a55e-8b7fbd3ba61a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:b2ded594-a073-5858-9aa4-7f2dea6bea70", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:14dfeeee-c5d1-5553-8650-ecc7e01a8abf", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:01ad4fe3-059d-5a18-abf4-47e4230a6dd8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:4e3936a1-2f44-5e40-ae62-3f72f45ebad5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:f1542a66-a325-5868-b311-3c9a048e1150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a11d554f-29e8-588f-9db5-6bee655e87cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:a4504d70-4572-5f14-ae6d-8fe29994ac12", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:670a1300-1ac2-58f3-b79c-fb3ca52632f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:5d3152c2-468a-564f-9552-1d2153eaa95c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:be29d22e-d221-5c58-8225-8929b4ebb855", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:1d828d8b-f58c-5ff1-9273-f91ff5b4f811", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:ba5f7fdc-2e51-5854-a6b8-cf82a9e9b502", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:46ce062d-f35d-5526-becf-b2686d79c1ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:9b3a9ae1-c325-59e6-8ba4-66e729ed2016", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:e490df58-26f6-5acd-bb99-85b7ec07d60f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:507c3b8c-e027-5580-b7de-e13853693cc5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:f2d83b0f-81ce-5f46-8f74-07b266513575", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:f3a099c9-9c64-5621-b0e4-b9ca9bd092f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ], "bom-ref": "urn:uuid:d96c8c0b-6119-5cf8-a702-8761222a53bd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-websocket-client-api." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-websocket-client-api@10.1.18-tuxcare.8" } ] }