{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7255ac40-5757-5438-a9ab-e213e720b4da",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5",
      "type": "library",
      "group": "org.apache.tomcat",
      "name": "tomcat-ssi",
      "version": "9.0.100-tuxcare.5",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b3799aee-1189-5a28-af82-3e903656fadd",
      "id": "CVE-2020-11996",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11996 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61963d34-0c11-53b4-b93d-077f8a93914f",
      "id": "CVE-2020-13934",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13934 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35ff7d86-cf64-58a2-9f06-af33eb5dca76",
      "id": "CVE-2020-13943",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-13943 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df498cb2-14b1-54d3-87b2-998bd4ec5836",
      "id": "CVE-2020-9484",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9484 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2317bd7f-5114-5eed-be35-6669776bff98",
      "id": "CVE-2021-24122",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-24122 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5768b7f9-9b13-5027-b53f-e5c1ebf5acd4",
      "id": "CVE-2021-42340",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-42340 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9bbafb7c-a11a-5879-a6ab-37f9a19bccfa",
      "id": "CVE-2022-34305",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-34305 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4776191a-ff12-568b-a485-fc1b069fe0a7",
      "id": "CVE-2022-45143",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-45143 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc79fc1e-6432-580f-a99d-c14569c042e5",
      "id": "CVE-2024-23672",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23672 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:764de993-65c1-5b56-916e-cd706b0cd931",
      "id": "CVE-2024-24549",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-24549 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef21772d-4de1-5160-8be7-55e700df425e",
      "id": "CVE-2024-52316",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-52316 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48d2271a-a0f7-5757-a67b-f70cb58a1165",
      "id": "CVE-2025-31650",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:571ea422-48c8-5954-81fd-eb0f6d0c9a3e",
      "id": "CVE-2025-31651",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:de17397e-d302-5123-b722-a978cdd42db8",
      "id": "CVE-2025-46701",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f4979b8-94cc-5403-8d07-15caf6c1e73d",
      "id": "CVE-2025-48988",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0f81b5c-fb80-510e-9410-f2bf5ad66fdd",
      "id": "CVE-2025-48989",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71b54048-36b5-5513-a3b3-f9a8e4aee26f",
      "id": "CVE-2025-49124",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52aea747-c761-5838-9f0a-17e58775ea39",
      "id": "CVE-2025-49125",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5583d4b6-021d-5661-8b68-49a989150510",
      "id": "CVE-2025-52434",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f80f5911-a41b-5f7b-8cd9-373b3338f20b",
      "id": "CVE-2025-52520",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25200f93-2935-5dad-95b1-a68817b5d6fd",
      "id": "CVE-2025-53506",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08e3909f-b25f-584e-8e2d-ed1d75183ea4",
      "id": "CVE-2025-55668",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccc3477b-2fbe-5d7c-8d86-c3242cafc164",
      "id": "CVE-2025-55752",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3dd02503-9ac1-507e-8f53-46a44dbdef26",
      "id": "CVE-2025-55754",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed55384a-ca89-5514-8850-21e6d6197a4e",
      "id": "CVE-2025-61795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57a356a9-d7f6-5201-92ca-201695ae6d28",
      "id": "CVE-2025-66614",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66614 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:67616809-9243-5cec-b4a6-5705d5bd8961",
      "id": "CVE-2026-24733",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a62b723-8d08-534b-ad1a-ed6cf6038cb6",
      "id": "CVE-2026-24734",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24734 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1655d72c-d651-5b75-b556-a59e6c7b1d08",
      "id": "CVE-2026-24880",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5d2b60e9-12fb-5536-846b-44ff3894e806",
      "id": "CVE-2026-25854",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c03f91e4-bef0-5e07-a4ff-5f05dc63e7c2",
      "id": "CVE-2026-29145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-29145 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b4d0401-c2bc-5fa5-b87c-d12f02e1c069",
      "id": "CVE-2026-29146",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0dae112c-8a51-5151-b35c-3dab4f918945",
      "id": "CVE-2026-32990",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a17ad276-b387-589f-837b-885b9041c1f2",
      "id": "CVE-2026-34483",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34483 is fixed in version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e657648c-77ba-56df-b9cf-fe1e273d5eeb",
      "id": "CVE-2026-34486",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34486 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b83dc9aa-dbe9-5b19-94bd-016bd8a9a46d",
      "id": "CVE-2026-34487",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34487 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6b92fb8c-e565-5f71-b982-92addd9e2026",
      "id": "CVE-2026-34500",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-34500 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c7d4618f-8845-55a3-9e93-1860e6f7b11e",
      "id": "CVE-2026-41284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41284 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d07008be-07fc-507a-b6d1-d7da131bc25b",
      "id": "CVE-2026-41293",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41293 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a026b44-e4fd-5d95-beda-9bc841949cad",
      "id": "CVE-2026-42498",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42498 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d45b7637-ad13-54ee-a19a-65797279de2a",
      "id": "CVE-2026-43512",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:914f418b-b890-5cc8-83ff-7b15675c1498",
      "id": "CVE-2026-43513",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f7a4c3e-2631-52fd-9933-74dd272e01a4",
      "id": "CVE-2026-43514",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8922ae32-d46b-52ac-835b-52a75ef33aa8",
      "id": "CVE-2026-43515",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43515 affects version 9.0.100-tuxcare.5 of org.apache.tomcat:tomcat-ssi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-ssi@9.0.100-tuxcare.5"
    }
  ]
}