{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8f63ff56-f4a2-5d10-9702-b5cb947ca3ce", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-catalina", "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1", "version": "9.0.24-tuxcare.1", "pedigree": { "ancestors": [ { "name": "tomcat-catalina", "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24", "type": "library", "group": "org.apache.tomcat", "version": "9.0.24" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2016-5388", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:2f019f34-3914-571d-81be-6683cf47b8e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-5388 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2016-8735", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:00086aa8-25b1-5514-a0a3-9a2f0708126a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-8735 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2017-12616", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:47b621a7-3d31-5eaa-877c-1c4988f05254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12616 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2017-12617", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:3eea1e7a-cb46-551b-8afe-9d1af0ef56e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12617 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2017-5648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:61b4d33d-d56f-558f-8bd6-751e5b2f84f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2019-0199", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:c650c728-a2d9-5bab-96a0-219c9e40007f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0199 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2019-0221", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:9e10267a-de55-5b15-860b-3297e42d3def", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0221 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2020-13934", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d41066b2-a71f-5b4a-b916-198e210c07d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13934 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2020-13943", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d74a6f2e-e187-5d3c-bae5-150fc244570d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13943 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2020-17527", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:fe875acb-9d0a-55d1-a1bd-1417d4b27f4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-17527 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2020-9484", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:1f6b89c0-7b43-5c4c-b63b-770c99c4e0ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-9484 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2022-42252", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:2c65abf3-fb8e-56ad-a86d-999aa705c407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-42252 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2022-45143", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:079ca10f-1e57-5b86-b236-939bdcf5ce83", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-45143 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina. Apache Tomcat 9.0.24 is not affected by CVE-2022-45143. The vulnerability concerns JsonErrorReportValve, a component that does not exist in version 9.0.24. JsonErrorReportValve was introduced in Tomcat 9.0.40. Version 9.0.24 only contains ErrorReportValve, which produces HTML error pages and properly escapes user-controlled data using Escape.htmlElementContent(). The CVE's stated affected range (9.0.40 to 9.0.68) accurately reflects when the vulnerable component was introduced.", "justification": "code_not_present" } }, { "id": "CVE-2023-24998", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:1432a36a-82ee-5293-b401-a50c53389193", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24998 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2023-28708", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:824a008e-3315-5370-a9bd-4acbda1fd636", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2023-41080", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:b8d0fb39-b9e2-5c9c-b33d-23f1276b1ba1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2023-42794", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:8a21a9df-4b69-506c-a7cb-6ff5955e9559", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-42794 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina. not_affected \u2014 Target version 9.0.24 is NOT AFFECTED by CVE-2023-42794. The vulnerability was introduced in versions 9.0.70-9.0.80 when an \"in progress refactoring\" removed the finalize() cleanup method from DiskFileItem.java. Version 9.0.24 predates this refactoring and still contains the original finalize() method (lines 549-558) that prevents temporary uploaded files from persisting indefinitely. The CVE a...", "justification": "code_not_present" } }, { "id": "CVE-2023-42795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:cb05bfc4-9307-5712-beae-ca341889f74a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:1de50a82-3158-5bcc-bae6-9c4eabd52b1d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2023-45648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:509ff863-8b89-5ba7-82a4-635fc3331fd7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2023-46589", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:7919c589-025f-5043-8c7a-bb7bc40d7a68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46589 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2024-21733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:04743d46-8887-5a83-9995-1b3b00acb8c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-21733 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:a9f928ba-59dd-5eb2-b6a3-ef5385b49359", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:bfa3aa61-74ad-5e70-9903-f05a39e4574d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34750 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:ad6de766-ba7f-5400-b1eb-05a1a851cde9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:2584bd42-f4da-52f9-80bc-813d93c83b4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-50379 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:6b547147-a7f8-51ec-b230-836365e203d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52316 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:90911fc1-60a0-521d-af30-3f1a0e9bf0ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56337 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:61f14727-727f-5063-bd6f-787f7de0f891", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:c7e94c88-4eff-5f7b-939f-fda842aedaf5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-31650 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina. Apache Tomcat 9.0.24 is not affected by CVE-2025-31650. The vulnerability affects HTTP/2 extensible priorities (RFC 9218) support, which was not implemented in this version. The target lacks all vulnerable code paths: PRIORITY_UPDATE frame handling, Priority.parsePriority() method, and priority HTTP header processing. The CVE's affected version range starts at 9.0.76, consistent with RFC 9218 support being added after 9.0.24.", "justification": "code_not_present" } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:98f5ac85-6cff-547c-bbf5-e06ef90ad859", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-31651 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:b8766e36-8327-5ae2-9aa7-7415665d72ae", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:f7810c36-35e5-57d4-a116-e64ed1bc4541", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:39f8478b-0b61-5863-9535-2129f6333216", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d0b893ee-20ce-59c6-87cb-0565311fa8c8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:8719c8c0-8cea-5d51-8a35-664c423dae39", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-52434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:af3a90ab-90fd-5e97-af00-10f99ec3c403", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d154f2e2-f9f1-5185-8fb8-69c338e482d8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:bc175655-f2e0-5a7e-b998-547ec0e933a0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:5ad7d690-852d-59c6-8c0c-caf8a5c923ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:63813e1a-e555-5cd8-a4e4-32b85678cd7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:89912b53-a393-527a-adb4-1d7d92ba1709", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55754 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:0ad466c4-b876-5904-84b6-476c2914c0f2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:993c99a7-b511-5948-8cdb-bc7fa6ecb65d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:c2afbc13-18a5-5fd7-b79f-f79fa1f3e339", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:92952b0c-40d1-5ad9-aa17-8b5193d9d42b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24734 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:afe3f88f-a257-5291-8863-ea0a91766ac8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:1a61ce97-e4d2-5cd4-8379-99a115481962", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:95c82ab2-1b50-5164-8a75-a0419e504099", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34483 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:58ee5133-6029-5d40-b3ad-9b626ca7ca2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:3ce4fb99-363a-5a79-8618-2c0dd267a4cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:ba739707-ed8d-50f4-b1de-465cd8b822f5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:a36c5f29-3cc6-524e-bbea-4349504ee287", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:efc21dd2-c133-5777-b5ed-ddf37f15d049", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:b978aea6-2749-5e10-9b30-48215d191ec0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d1a02636-6099-5067-a34d-aaa574172a11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:cbd6a536-4a6a-5caf-8100-cf16c07a0aa4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:de96ef4c-7ec7-5c48-ade6-aaff47b552e0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65182 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:fec1e14a-6c24-5daf-9ca6-bf2d47b9482d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:3c1ed1fd-3c8c-56f0-bb29-b93caeb5ad46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68525 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.24-tuxcare.1" } ] }