{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2bb59c87-53d7-5022-abbc-73631360c6cb", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-storeconfig", "purl": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1", "version": "9.0.24-tuxcare.1", "pedigree": { "ancestors": [ { "name": "tomcat-storeconfig", "purl": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24", "type": "library", "group": "org.apache.tomcat", "version": "9.0.24" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2017-12617", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:cdca2cf9-19b8-5c4d-bcf7-016c6b6399c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12617 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2017-5648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:7ef57643-4460-5ea3-bde3-9db7ded97a82", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2019-0199", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:c9165ab1-4bc6-5215-92fa-c7e5aa7f3e08", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0199 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2019-0221", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:a6a234b2-a47a-5ffb-bb1a-89e88e488c18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0221 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2020-13934", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:896d4e85-e72c-50e0-84a1-558bcfa48f0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13934 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2020-13943", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:463e096c-7cdf-5839-aa04-87801c170ae4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13943 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2020-17527", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:ce8c75bc-fc38-56e6-831b-df545316d2de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-17527 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2020-9484", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:2a35b2cb-73f6-5f71-9ac0-01211d1156df", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2020-9484 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2022-42252", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:7a952c4b-40bf-5466-9d0a-7c224f480555", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-42252 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2022-45143", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:f53f4548-2b2c-52df-aca8-990a192f8ae3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2022-45143 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig. Apache Tomcat 9.0.24 is not affected by CVE-2022-45143. The vulnerability concerns JsonErrorReportValve, a component that does not exist in version 9.0.24. JsonErrorReportValve was introduced in Tomcat 9.0.40. Version 9.0.24 only contains ErrorReportValve, which produces HTML error pages and properly escapes user-controlled data using Escape.htmlElementContent(). The CVE's stated affected range (9.0.40 to 9.0.68) accurately reflects when the vulnerable component was introduced.", "justification": "code_not_present" } }, { "id": "CVE-2023-24998", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:e2a3aeb6-25aa-5e0d-a584-65db0fcfa97d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24998 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-28708", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:fc4ef197-e254-58c6-bc22-bcad7e16b3af", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-41080", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:b5aaded3-f469-576c-bb60-c6896ff4e2c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-42794", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:ac90c66e-6370-5662-ad47-c8c192a6d58b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-42794 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig. not_affected \u2014 Target version 9.0.24 is NOT AFFECTED by CVE-2023-42794. The vulnerability was introduced in versions 9.0.70-9.0.80 when an \"in progress refactoring\" removed the finalize() cleanup method from DiskFileItem.java. Version 9.0.24 predates this refactoring and still contains the original finalize() method (lines 549-558) that prevents temporary uploaded files from persisting indefinitely. The CVE a...", "justification": "code_not_present" } }, { "id": "CVE-2023-42795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:ee394146-c295-5bdb-8ecc-b30a4ffb8401", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:09a9c075-f863-5209-9662-487d1e05fed7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-45648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:25e2bb6f-644a-5909-ad76-d36ad9ea73c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-45648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-46589", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:b11ee9e6-9d1e-52cd-a392-e668d83418ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46589 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-21733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:2352456e-46a1-55d7-bb86-cb313450280e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-21733 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d206f1d5-a85a-573f-a80b-ae257f0857bb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:56c894be-854c-5bac-8cb3-71b42bfa38a3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-34750 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:4011fb31-f198-58a9-908e-ceeeeb1bc608", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:3aa31cc3-41e1-5c27-a7c9-bf95c0450ce0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-50379 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d9761cd7-46c0-5b6a-9209-9b56d852cb0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52316 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:77b994b6-44ce-5d53-82d1-281fb8c19e59", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56337 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:355207b9-f659-59ec-a0ff-a1cd69b83a77", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:ce647b8a-c4c3-58af-b560-bf0c078b0f77", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-31650 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig. Apache Tomcat 9.0.24 is not affected by CVE-2025-31650. The vulnerability affects HTTP/2 extensible priorities (RFC 9218) support, which was not implemented in this version. The target lacks all vulnerable code paths: PRIORITY_UPDATE frame handling, Priority.parsePriority() method, and priority HTTP header processing. The CVE's affected version range starts at 9.0.76, consistent with RFC 9218 support being added after 9.0.24.", "justification": "code_not_present" } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:5ea1fbf1-7a68-5d67-a677-164688140451", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-31651 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:448e1969-e979-559a-9744-1c218c2096a5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:c9a328cb-148a-5af1-933d-90fc7b88e5e5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:1f269fb7-738d-50f3-881f-27a76e6afaf7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:41b06724-6461-524d-a056-06f96f2caf9b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:a6ec1377-0d9d-54d7-80d3-6d10ffeb104c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-52434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:dfe020dd-f663-54a7-a093-3cdd114b9968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:72eabdc4-ee22-52f8-b857-38eaa1b9ec6b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:3745aeae-4536-5a9f-a213-8b60d3fb0bcb", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:b14af76e-a653-5ff2-9e99-6457728630a9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:6556fbe7-926e-55d6-9e13-048f42855f63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:8d95fce7-d719-5b72-b0a6-50bf0956f7eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55754 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:d5e47d50-8604-51a6-9562-67f9fb5a5b7a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:525d4018-bbb1-5eef-bac1-128edde489d6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:e90e82bf-e7d1-52ff-a5f5-48691e379224", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:f31130e9-eaac-5d58-98ba-da40bb036f2b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24734 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:113f752b-ab34-552e-b82e-5396ab181751", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:85b1d42c-974d-5e5a-9531-9af7e4c5b81f", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:46daa981-2c1e-5137-8917-c6ba223a60c1", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:28560304-3299-5469-86f1-14f88eec13ca", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34483 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:2f1b717b-1475-530f-b043-1e4f9cc0d4ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34487 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:75294445-d92d-5cb5-a9a2-6822f26ab121", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:e6027448-dfbd-5441-b173-aea6d47dd677", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:2c6140b6-cd8c-5425-a145-2c0a2e227938", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:19e46dd6-b012-5882-8b8b-3a4448c19265", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:cfbfdc08-eb12-5f2e-930c-8646c56db2f1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:1447a656-baf5-5852-8569-4a0c2ffc6e7f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:485e2846-dc08-5679-8a55-5e7bed7b1b22", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:0535aafb-b4f3-5b74-a355-56d5dc44d5bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:e03f9eac-fdbf-5044-ae8e-d3e9bf59dfaf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65182 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:53510871-9452-546a-bfde-c3dde1b17f9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ], "bom-ref": "urn:uuid:bacfde51-ac71-5582-9620-54e7108828be", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68525 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-storeconfig." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.24-tuxcare.1" } ] }