{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:66cfa0ca-9c8d-568e-994e-053f9940ded2", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7", "type": "library", "group": "org.apache.tomcat", "name": "tomcat-el-api", "version": "10.1.18-tuxcare.7", "purl": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:abca7097-200f-52a7-95f4-312321b34a3f", "id": "CVE-2024-23672", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:3cdcc0e3-990e-5b5d-bbd4-d0d1c7a87520", "id": "CVE-2024-24549", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:a3087fc8-09ec-5354-a8d0-f0994f890459", "id": "CVE-2024-34750", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8d218940-7618-54f4-9e88-7e1e8546971e", "id": "CVE-2024-38286", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:446e794e-ab41-57f4-b7f8-90b71d0d5bcb", "id": "CVE-2024-50379", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e8b2ab34-5fe7-5b5e-843d-195026e05ea5", "id": "CVE-2024-52316", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dc00cf5f-422b-5fe9-b66a-102dc6abb6cd", "id": "CVE-2024-54677", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d05458f6-e0d6-59ce-b15d-acd0fab77dc7", "id": "CVE-2024-56337", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:ba25e7e3-d94d-52d7-8583-e43a24db7506", "id": "CVE-2025-24813", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bf17b8ed-cb09-5643-bdbd-f1851fa97991", "id": "CVE-2025-31650", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:0c84d44e-9c19-5512-9681-6bda8d5b784b", "id": "CVE-2025-31651", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:e62bf3b1-ff85-54fd-ba6f-d68e512323b9", "id": "CVE-2025-46701", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:18f6c225-b49d-562d-8350-d5f0dd2ba916", "id": "CVE-2025-48988", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:369b9614-2e06-55f3-8c5a-b2f08d01317c", "id": "CVE-2025-48989", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:bc8f1700-c928-5e32-a5c4-f060fe2fba39", "id": "CVE-2025-49124", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:765ddfd8-f0fe-5104-8160-d6e4b5772141", "id": "CVE-2025-49125", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:862093d9-5a87-5480-be79-73d7a851be09", "id": "CVE-2025-52520", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:66ad6933-b7cf-5998-8525-0e54bd8c570b", "id": "CVE-2025-53506", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:19ec2144-ad70-5304-bd98-66ed81a41f86", "id": "CVE-2025-55668", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f1fa19e5-b89c-5c40-b7f9-4108a22dfea9", "id": "CVE-2025-55752", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9658953e-2020-52cc-891b-e7be6869dfc7", "id": "CVE-2025-55754", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:813e9498-f21f-5431-aa9d-a103fc73643a", "id": "CVE-2025-61795", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:cb728499-001a-5b90-85d6-3516034b40dc", "id": "CVE-2025-66614", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66614 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f7a69a16-6417-5134-aab3-f5161006aa09", "id": "CVE-2026-24733", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:dd5f5658-6e5d-5abf-b900-36f9d4ec438c", "id": "CVE-2026-24734", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24734 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:88600d8c-4ff6-522d-932a-92ec55a3b4c3", "id": "CVE-2026-24880", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:edf83b0e-8a4e-598f-91fd-a4e64b287958", "id": "CVE-2026-25854", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:f2f0bef3-dbb9-5b5e-9686-0748ebcc5404", "id": "CVE-2026-29145", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c408df6a-676f-5f6e-b774-b2ae1b7af5b3", "id": "CVE-2026-29146", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:9daeee42-d6cb-5657-a258-fc27d42f77a2", "id": "CVE-2026-32990", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:951ac706-f27c-52fb-a628-32134dfaa2e8", "id": "CVE-2026-34483", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:1e06b1b8-bece-50ae-a7af-cbc6c9358fe5", "id": "CVE-2026-34486", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:8a79dac1-ca69-510b-9995-ecfc0f50b096", "id": "CVE-2026-34487", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:24bb924c-25a0-5c9f-bc4f-7e213be1d5e9", "id": "CVE-2026-41284", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c920d53e-5c8d-5ae9-b871-85d766345426", "id": "CVE-2026-41293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:c6f1e666-caee-5c4e-93ee-69660671e80b", "id": "CVE-2026-42498", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:6c7a3026-ce50-53ea-a4a2-af5761dfe5b4", "id": "CVE-2026-43512", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:892178be-e3ef-5fd1-9e66-6a07a970d93c", "id": "CVE-2026-43513", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:88edbb70-544e-5b66-a23c-9dd1bafcb5b2", "id": "CVE-2026-43514", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:187366b2-2560-59cc-8963-8848c61c7f8d", "id": "CVE-2026-43515", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:925f1109-94a6-5534-acde-a47da45cd16f", "id": "CVE-2026-65182", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65182 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:d6048366-d1ec-53f0-855d-fa9e3a583e88", "id": "CVE-2026-65905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }, { "bom-ref": "urn:uuid:14bc9fd1-3b1e-500b-9fee-ce6f7a70748a", "id": "CVE-2026-68525", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.7 of org.apache.tomcat:tomcat-el-api." }, "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-el-api@10.1.18-tuxcare.7" } ] }