{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:8b3afa91-c386-53eb-8741-f260ca3ec9d0", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "tomcat", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12", "type": "library", "group": "org.apache.tomcat", "bom-ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12", "version": "9.0.46-tuxcare.12", "pedigree": { "ancestors": [ { "name": "tomcat", "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46", "type": "library", "group": "org.apache.tomcat", "version": "9.0.46" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2008-1947", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:b74cc6e9-fccc-51d0-b543-f67f508f8a26", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2008-1947 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2013-4590", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:2ce6f558-be6e-5369-9645-f8347c976bde", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-4590 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2015-5174", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:ccf1c648-d43e-52f5-9480-2a5efbedd3c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5174 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2015-5346", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:16196aec-eec3-53d3-9219-6fc16aa522c0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5346 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-0706", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:bfcd2f3d-01ff-538c-812e-294bc6f0c1ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0706 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-0762", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:12a12009-cb07-5da9-addd-a5eec0895485", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0762 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-0763", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:48fa8ee9-e45a-5df7-bf80-fd7befc9ec69", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0763 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6794", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:2d10b6b9-a1c0-5d28-9a9a-23dc6bf13ae7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6794 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6796", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:7dc713bd-7da6-54e2-9988-267be9c49071", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6796 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6797", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:e1932786-5489-511c-9a0c-51b109d3867a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6797 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-6817", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:dc871a6e-ba90-5e46-b512-931b6c10fa46", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6817 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2016-8747", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:e05fc668-6635-51ad-9df5-0b923d25330b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-8747 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-5647", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:b4a098bf-f1d3-5204-a2aa-e6204c3331ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5647 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-5650", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:34cf48f9-1103-552e-a3a6-56be57648578", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5650 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-5664", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:76dc70e3-b522-5289-b35a-4ffd5bd1348c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5664 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-7674", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:1b6110cd-cf54-584a-b552-72e4982910d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7674 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2017-7675", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:3dd1d3e8-7b36-55bb-ae76-9801f0560970", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-7675 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2019-0221", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:c1077201-6833-5bc7-ab8f-9ebaddb88cc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0221 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2019-17569", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:a6282050-aed1-5ea5-9ae4-eb9193302cba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-17569 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2020-11996", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:cd9cd261-d821-508b-aaed-c9d9ae090332", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-11996 does not affect version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat. Version 9.0.46 is not vulnerable. Summary: The target repository is NOT vulnerable to CVE-2020-11996. It contains both the initial fix (commit 9a0231683a) and a subsequent optimization (commit f258efef6c) that prevent the DoS vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2020-13934", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:1e37cdc9-8a5f-561a-85a9-c17a4350dca8", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2020-13934 does not affect version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat. CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36", "justification": "code_not_present" } }, { "id": "CVE-2020-13935", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:af7a3d74-f18e-59de-b276-a89500234440", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13935 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2020-1935", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:e8bfd7b2-4133-5434-b904-8883cdf2ef9a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-1935 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2020-8022", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:1a7d2f1f-af63-5ecf-bb05-b080686084b8", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat 9.0.46-tuxcare.12." } }, { "id": "CVE-2021-30639", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:3b22531e-31e7-56ab-84b9-20def75f56b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-30639 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-30640", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:359b836d-d35d-5a6f-a05c-fd1ecaab6422", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-30640 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-33037", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:66cb3923-82da-5581-b482-baf01545fa27", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-41079", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:a49a065b-aecf-5c5c-ab2f-995ec65c2a4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-41079 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-42340", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:f9a54059-978f-5e99-9b8c-c3b75d1f15a8", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2021-43980", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:09bac1ba-fbda-545e-8759-0109b285911a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-23181", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:5bc48d9a-cf2f-5865-b2f8-29d7dbae26cd", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-25762", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:f38a8141-aa29-5053-a443-940040a4931e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-25762 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-29885", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:d517c42d-29eb-55b3-abc9-223619ef35c2", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2022-34305", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:31de19a4-bbf2-5aff-8c8c-4fa9a73325ec", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-34305 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2023-41080", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:fe0f9e88-9178-5896-ba37-2df30e5bd44d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2023-42795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:05d8a666-1de7-5119-bb1b-50ccfd12f627", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-42795 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2023-45648", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:dfc9b51c-b394-594a-abd0-65fec1a3adb0", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2024-54677", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:6957fc14-4c05-5008-b124-689d46032e96", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-54677 does not affect version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2025-49124", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:9a6d2df9-5213-599e-acab-41d174c11f70", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-55752", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:b6de1b5c-8745-54a5-b9cf-3c7a2148182d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55752 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-55754", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:0f9dee29-c0ce-5271-967b-de1ec659b1c7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-61795", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:2f37cd7c-bf93-57ef-b21d-e41d57496121", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2025-66614", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:8dd21f49-0d2e-58ef-804c-3e7d69cda775", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66614 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-25854", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:f007d6c2-fb0c-5f3a-af36-eb9ef3c33efc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-25854 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-29129", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:5211e6e8-efa9-593a-96cb-99808902843c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29129 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-29145", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:cea1eaa3-120d-5ec1-81e6-2492d7fa41e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-29145 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-29146", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:6a0b97ba-4fde-5bd0-be92-fc3acb365e8b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-29146 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-32990", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:de81f3b1-0f7a-585a-82e2-928620f25aab", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-34483", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:83c16def-2439-51fd-87f2-55f448c0653b", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-34483 does not affect version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat. Version 9.0.46 is not vulnerable. Summary: CVE-2026-34483 does NOT affect Tomcat 9.0.46. The vulnerable component JsonAccessLogValve was introduced in version 9.0.74 (April 2023), almost 2 years after version 9.0.46 was released (May 2021). The target version predates the introduction of the vulnerable feature. [terminalized not_affected from patch_application_manual/not_vulnerable]", "justification": "code_not_present" } }, { "id": "CVE-2026-34486", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:3181f0e7-81f0-54b2-bc6b-c0c806dcf6ac", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34486 is fixed in version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-34487", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:8e0b6276-d3e1-5dc2-a0e2-a03f26b7f12f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-41284", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:58dcedbb-3ca1-5b4b-b9a9-48728977000d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41284 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-41293", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:c275b8a2-6044-55e9-b769-133e5d5e4f41", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41293 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-42498", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:fa2065db-b702-59c5-8dda-19884d138785", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42498 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43512", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:c023d9d7-1df7-5ee4-a828-95b121f5ed19", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43512 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43513", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:da9f59c5-b9c3-5e82-b497-080d1a1d3f15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43513 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43514", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:965be53f-70c4-5bd8-8b90-12331d0e13a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43514 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-43515", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:e89170c3-8d21-52fd-bb96-e0731d4e4b96", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-43515 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-65182", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:a8c2504b-3b98-5a92-bf66-c815ffd43812", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65182 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-65905", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:2b9cdcf2-aeec-570c-a711-ecbdb7108bcc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-65905 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } }, { "id": "CVE-2026-68525", "affects": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ], "bom-ref": "urn:uuid:21d446fe-13fd-5d2f-be8d-08b2f4b546a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-68525 affects version 9.0.46-tuxcare.12 of org.apache.tomcat:tomcat." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.12" } ] }