{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:89d38dc8-e92c-5ab9-8adb-bd03d8f34593", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat-storeconfig", "purl": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16", "version": "9.0.50-tuxcare.16", "pedigree": { "ancestors": [ { "name": "tomcat-storeconfig", "purl": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50", "type": "library", "group": "org.apache.tomcat", "version": "9.0.50" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2017-12617", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:a8866860-0c7a-51ad-922b-cd0d598ce18e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-12617 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2017-5648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:e00670c8-54bd-534a-8711-5ac32b852180", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5648 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2019-0199", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:7fa4c14c-e886-5ec2-8880-b018ab742a13", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0199 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2019-0221", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:7592a520-5404-5182-b2a6-e89b9d33f35f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0221 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2020-13934", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:1313d83b-a19c-54eb-aa13-b634e3bca2e9", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-13934 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig. CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36", "justification": "code_not_present" } }, { "id": "CVE-2020-13943", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:9c6cb795-26ce-5ca7-9a84-a6c4ba6a221b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-13943 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig. Version 9.0.50 is not vulnerable. Summary: Target repository already has the fix for CVE-2020-13943 applied. The maxConcurrentStreams check is correctly located in headersEnd() method, not in headersStart(). [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2020-17527", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:6bd681f1-b588-512c-b225-2e4f8e135bcd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-17527 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2020-9484", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:8cacd154-527a-531f-8b85-fdfe14d31ec5", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-9484 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig. Fix already present in baseline since 9.0.35. Verified in java/org/apache/catalina/session/FileStore.java:303 \u2014 canonicalFile.toPath().startsWith(storageDir.getCanonicalFile().toPath()) containment check is in place. Advisory range 9.0.0.M1-9.0.34; 9.0.90 is well past the fix.", "justification": "code_not_present" } }, { "id": "CVE-2022-42252", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:3787fe35-8047-58d4-8c34-44c782de108c", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-42252 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2022-45143", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:fe7cc2b5-d4d9-541f-9527-ce6dbfb1ef09", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-45143 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-24998", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:c77e84b9-f129-5b26-96f1-613cea5a2d8a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-24998 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-28708", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:44621c92-9879-546f-8756-e2f9cc46d566", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-28708 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-41080", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:8339d1ec-9fd4-505a-86f9-551998d3cd63", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-42794", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:209f4dce-c867-5d24-b56a-eb3f2be060e6", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-42794 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig. not_affected \u2014 Apache Tomcat 9.0.50 is NOT affected by CVE-2023-42794. The target version (released June 28, 2021) predates the vulnerable versions (9.0.70-9.0.80) and already contains the finalize() method that prevents the vulnerability. The CVE describes a denial-of-service issue introduced by \"unreleased, in progress refactoring\" that removed the finalize() cleanup method in versions 9.0.70-9.0.80. Versio...", "justification": "code_not_present" } }, { "id": "CVE-2023-42795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:6478bb91-0c1d-514d-b358-b86a42160704", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-44487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:cbd265a8-965d-5fa0-845d-75cb031b0087", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-44487 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-45648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:b59a3230-3651-5745-9fc6-868aa94a99b8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2023-46589", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:0eb0dca9-1747-5e83-a99c-6d4568cbb055", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46589 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-21733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:8474f867-32b1-5848-99b3-ef41a5d28426", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-21733 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-24549", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:0f166905-da51-5d19-8545-c1cbd92ab321", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-24549 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-34750", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:2e2855ba-a91a-5f7f-859c-31f6f3c39a35", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-34750 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-38286", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:2082824e-d5b9-510e-b77c-0deb2d1c4f93", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38286 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-50379", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:5262a7b5-ae62-5db0-8273-feee49865c05", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-50379 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-52316", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:5bd81af6-7e66-5faf-999f-8a42341d7773", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52316 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2024-56337", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:eef55a45-6395-514c-ad9a-67db95ed04e4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-56337 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-24813", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:5e7a8019-2550-5949-ac68-9a13974af3a2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-24813 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-31650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:d300b2a1-db4e-5469-b69d-f14e533d55ce", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-31650 does not affect version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig. 9.0.50 predates HTTP/2 RFC 9218 PRIORITY_UPDATE frame support (added in 9.0.76). Advisory range per NVD/Snyk/GHSA is 9.0.76-9.0.102. Code inspection confirms: Http2Parser.processFramePriorityUpdate method and priority parsing in Stream.emitHeader do not exist in this baseline. Vulnerable code path is absent.", "justification": "code_not_present" } }, { "id": "CVE-2025-31651", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:fdd05629-afcc-5346-9897-08251905780a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-31651 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-46701", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:f89258c6-7992-54b1-b7c6-de72098458ca", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-46701 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-48988", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:6bcc03fc-2f12-5d1f-82fd-25515d8f2584", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48988 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-48989", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:8fda6d0b-2d05-597b-a415-1965ec5c2828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-48989 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:051fd882-4a3a-543f-b010-604401e1e368", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-49125", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:590467b9-ebc9-5479-bd96-5e70dc4e1eb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49125 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-52434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:5ae065e5-6617-5a17-88d0-2b781ba37897", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52434 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-52520", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:afa141f5-650d-5678-a390-33fcf8f3faf9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-52520 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-53506", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:71a676a1-2385-59a0-b951-8e396c8b0fa9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-53506 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55668", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:9064a364-f8f7-5443-a4a2-caba3ad25540", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55668 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:42c9fc36-83f2-5dee-8556-a79d26da896e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-55752 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:9f106e59-481c-5c73-b763-8e6ce5abd887", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:796de5ac-2411-54b4-b0c3-b6a810eaa6cc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:215d3b59-a7ae-56e2-b53c-56e34c61df70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24733", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:05394850-1a9f-5d76-9ec2-5da975872312", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-24733 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24734", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:96574f32-7b5a-5f16-bf7a-516f0059824a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24734 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-24880", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:ee2cc4ad-d290-52bb-b78a-78df80f2c1db", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24880 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:aa9bd6cf-c95f-598e-99dc-99e1ac109b78", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:92b75e01-0a0e-5788-975c-51130c586f7e", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:71d72176-19fc-5b17-b159-4eaf9393dfc8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34483 is fixed in version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:0b7be663-64b7-567a-9c5f-c957d745ce37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34487 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:39406de6-52ff-561f-aceb-a6e84a8bc2c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:fd045fb2-b5e1-5ee4-ae22-322ef6f9b345", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:48367028-3426-5c75-b8bc-768dcf5510e5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:42d94360-d493-5bf2-8a12-ea2798219706", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:68240e85-41b9-53ef-892d-13c82528a6c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:0d87ce56-d5a1-5a3a-9388-cf828ccd78e1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:56f54310-ba50-5035-ad82-3d8d17452740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-53434", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:79ff26da-1ac1-5211-8e4e-8022f5416697", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53434 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:38040eeb-914e-5113-8a3c-b86201e80eda", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65182 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:2f0a9db3-4e6b-5aa3-aa7d-da792107443e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ], "bom-ref": "urn:uuid:40ca79bc-3e70-5792-bd64-033a72df4bf4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68525 affects version 9.0.50-tuxcare.16 of org.apache.tomcat:tomcat-storeconfig." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat-storeconfig@9.0.50-tuxcare.16" } ] }