{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:4627f5b7-c8ce-534d-9e48-6284a44e9694", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-catalina-ha", "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16", "version": "9.0.50-tuxcare.16", "pedigree": { "ancestors": [ { "name": "tomcat-catalina-ha", "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50", "type": "library", "group": "org.apache.tomcat", "version": "9.0.50" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2017-12617", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:d2b663ee-2d8e-5015-8e28-3917dbc3d787", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12617 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2017-5648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:54821a0c-0bf1-5599-a2d4-189194c5d7c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5648 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2019-0199", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:9f8dfa1c-87a9-536e-86c7-bd9803e6fc88", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0199 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2019-0221", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:a357d62d-e8d4-564b-b0f7-554c872aba1b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0221 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2020-13934", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:1b9ca286-ea36-5063-b52f-ce7a56394489", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-13934 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha. CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36", "justification": "code_not_present" } }, { "id": "CVE-2020-13943", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:7e1bcc48-7645-5a34-b987-87dc697aede6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-13943 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha. Version 9.0.50 is not vulnerable. Summary: Target repository already has the fix for CVE-2020-13943 applied. The maxConcurrentStreams check is correctly located in headersEnd() method, not in headersStart(). [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2020-17527", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:816be89a-c8da-5c0f-9724-e6a49962c04a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-17527 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2020-9484", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:725bf362-371f-56a2-8f8c-21fafd2a3967", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-9484 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha. Fix already present in baseline since 9.0.35. Verified in java/org/apache/catalina/session/FileStore.java:303 \u2014 canonicalFile.toPath().startsWith(storageDir.getCanonicalFile().toPath()) containment check is in place. Advisory range 9.0.0.M1-9.0.34; 9.0.90 is well past the fix.", "justification": "code_not_present" } }, { "id": "CVE-2022-42252", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:4f7ee7d1-9df2-5dc5-b665-fc9acf69e70a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2022-45143", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:00cf995a-52ee-5b6f-a3d9-ba4fce28ff73", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2023-24998", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:b680167a-21b7-56d5-a924-11ba1ebab2ad", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24998 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2023-28708", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:0135ce6d-e3ad-587a-ad5b-b8a8e23462e1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2023-41080", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:9efdf58b-6dca-59ee-9024-677400628251", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2023-42794", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:85544a19-907d-58a5-9357-cd435a9d9642", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-42794 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha. not_affected \u2014 Apache Tomcat 9.0.50 is NOT affected by CVE-2023-42794. The target version (released June 28, 2021) predates the vulnerable versions (9.0.70-9.0.80) and already contains the finalize() method that prevents the vulnerability. The CVE describes a denial-of-service issue introduced by \"unreleased, in progress refactoring\" that removed the finalize() cleanup method in versions 9.0.70-9.0.80. Versio...", "justification": "code_not_present" } }, { "id": "CVE-2023-42795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:2ba6f57b-88b3-5f75-850a-b1e3d3c92951", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:123a8026-089e-5262-8fda-fb203b2d5b53", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2023-45648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:a04454b9-7e4a-5338-9aaa-79dc30b20c04", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2023-46589", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:3c4e5e84-4325-5568-822d-2d79dbe39cdb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46589 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2024-21733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:dfb741c5-b1dd-5854-95e0-28b28ebc04e4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-21733 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:67303254-4caa-538d-b0b9-e6164a1c7818", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:954ee33a-1b24-5747-b553-70c3ede18b6d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:a6973712-b40c-5dfc-82f9-534151eb9911", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:5d867cbc-8672-5f87-bb77-7acfc5921046", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:31a5bcb4-b58e-50a0-9b84-79ea639b0057", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:bfaf48a7-2838-5007-a070-a1b8662b681b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:3263b4eb-9bb6-559f-a630-9d4cafd642e0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:f8c16b72-438f-5f9b-aea8-5ad6d80a309d", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-31650 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha. 9.0.50 predates HTTP/2 RFC 9218 PRIORITY_UPDATE frame support (added in 9.0.76). Advisory range per NVD/Snyk/GHSA is 9.0.76-9.0.102. Code inspection confirms: Http2Parser.processFramePriorityUpdate method and priority parsing in Stream.emitHeader do not exist in this baseline. Vulnerable code path is absent.", "justification": "code_not_present" } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:1fd723e2-812a-5c7b-b22e-11782a5235b3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:6793055a-6a11-55c9-bb05-dd5ee820271c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:5abda53d-a8c4-5c8b-9471-9cac970f7272", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:e4710e0e-b16e-598c-b46e-72d259a53a94", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:43468804-4eb3-5cda-9c13-c38494202f54", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:3388f22d-224c-510c-8a62-ba403ec8a878", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-52434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:1fc5caf3-2a6f-520a-aa51-aebc1fb305d3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:07342331-5f4f-5119-bb28-5f3f07558828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:121f2dfd-806e-5f2b-a957-398aaacc5a37", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:3cf17142-5e15-53f1-a279-c726cc7b66c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:3cb46000-3b42-5b25-8f33-613e8fc7344e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55752 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:217ecd90-eafe-5b98-b3f2-0928bd56309e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:c631c305-3fa6-57d1-94f7-677c2bcf7ec0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:967018e2-7a2e-50fa-8bf4-571f7f30ea09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:24a6d229-7238-5e22-b6a4-6cc9784f4723", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:0c188b44-17af-5f0a-ab6f-312baea204c7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24734 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:e1a160ef-e909-5d68-9e44-8ecca4e1ceae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:bc817068-425d-5c1f-9ab8-aee12fa03246", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:d0d8b1db-dbbb-58a3-8a92-3ff7a5c27069", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:467f2a5c-a280-58c7-89f6-078f1930a1f5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:9c687f89-08aa-5bad-8be4-1c4c5a84841b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34487 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:38b28200-459a-5343-ae1a-318493a3d944", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:5c3338f7-43f4-5d78-b222-faea67a3130c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:d4491421-2e53-5ce9-aad7-6bcfa9f9c594", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:d55ca11e-5b6d-5d8d-8508-4eb28f82d019", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:7229a876-d285-5b2b-abb1-563066c9ea55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:dbc18042-5c44-54f6-8c2d-8c7aeebf7c4c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:a8dd690c-713f-5c90-8211-738d8367742f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:afdce5f9-eea7-58f6-84d4-0cfd962b1172", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:c2d5c834-3f92-5208-bf27-774940ec888b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65182 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:84276282-3c87-521d-beff-989e5b504762", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:f0eec140-2f0a-5f05-a163-e840f79765c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68525 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-catalina-ha." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.50-tuxcare.16" } ] }