{
  "@id": "urn:uuid:4921a9ba-1f5f-46b0-a6c6-c3bf2836178e",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 37,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T15:44:00.110412+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:28:44.006786+00:00",
      "status_notes": "Vulnerability CVE-2016-5018 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2016-5018"
      },
      "action_statement": "Vulnerability CVE-2016-5018 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:41:42.084809+00:00",
      "status_notes": "Vulnerability CVE-2017-12615 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2017-12615"
      },
      "action_statement": "Vulnerability CVE-2017-12615 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2017-12617 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2017-12617"
      },
      "action_statement": "Vulnerability CVE-2017-12617 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2017-5648 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2017-5648"
      },
      "action_statement": "Vulnerability CVE-2017-5648 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-11784 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2018-11784"
      },
      "action_statement": "Vulnerability CVE-2018-11784 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-1304 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2018-1304"
      },
      "action_statement": "Vulnerability CVE-2018-1304 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-1305 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2018-1305"
      },
      "action_statement": "Vulnerability CVE-2018-1305 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-1336 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2018-1336"
      },
      "action_statement": "Vulnerability CVE-2018-1336 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-8014 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2018-8014"
      },
      "action_statement": "Vulnerability CVE-2018-8014 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-8034 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2018-8034"
      },
      "action_statement": "Vulnerability CVE-2018-8034 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-8037 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2018-8037"
      },
      "action_statement": "Vulnerability CVE-2018-8037 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-0199 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2019-0199"
      },
      "action_statement": "Vulnerability CVE-2019-0199 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-0221 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2019-0221"
      },
      "action_statement": "Vulnerability CVE-2019-0221 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-0232 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2019-0232"
      },
      "action_statement": "Vulnerability CVE-2019-0232 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-10072 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2019-10072"
      },
      "action_statement": "Vulnerability CVE-2019-10072 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2019-12418 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2019-12418"
      },
      "action_statement": "Vulnerability CVE-2019-12418 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:28:44.006786+00:00",
      "status_notes": "Vulnerability CVE-2019-17563 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2019-17563"
      },
      "action_statement": "Vulnerability CVE-2019-17563 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2020-11996 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2020-11996"
      },
      "action_statement": "Vulnerability CVE-2020-11996 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2020-1935 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2020-1935"
      },
      "action_statement": "Vulnerability CVE-2020-1935 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2020-1938 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2020-1938"
      },
      "action_statement": "Vulnerability CVE-2020-1938 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2020-9484 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2020-9484"
      },
      "action_statement": "Vulnerability CVE-2020-9484 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:37:14.382670+00:00",
      "status_notes": "Vulnerability CVE-2021-24122 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2021-24122"
      },
      "action_statement": "Vulnerability CVE-2021-24122 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2021-25122 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2021-25122"
      },
      "action_statement": "Vulnerability CVE-2021-25122 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2021-25329 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2021-25329"
      },
      "action_statement": "Vulnerability CVE-2021-25329 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:12:12.887949+00:00",
      "status_notes": "Vulnerability CVE-2022-42252 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2022-42252"
      },
      "action_statement": "Vulnerability CVE-2022-42252 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:04:11.478044+00:00",
      "status_notes": "Vulnerability CVE-2022-45143 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2022-45143"
      },
      "action_statement": "Vulnerability CVE-2022-45143 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:11:34.688190+00:00",
      "status_notes": "Vulnerability CVE-2023-24998 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2023-24998"
      },
      "action_statement": "Vulnerability CVE-2023-24998 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T00:52:46.305817+00:00",
      "status_notes": "Vulnerability CVE-2023-41080 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper. not_affected \u2014 CVE-2023-41080 (Open Redirect in FORM authentication) is not present in Tomcat 10.1.33. The fix preventing protocol-relative redirects was already included in the upstream Apache Tomcat 10.1.33 release that TuxCare onboarded. The vulnerable pattern never existed in this version.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-41080"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-41080 (Open Redirect in FORM authentication) is not present in Tomcat 10.1.33. The fix preventing protocol-relative redirects was already included in the upstream Apache Tomcat 10.1.33 release that TuxCare onboarded. The vulnerable pattern never existed in this version."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:25:14.318468+00:00",
      "status_notes": "Vulnerability CVE-2023-42795 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper. not_affected \u2014 Target version 10.1.33 is NOT affected by CVE-2023-42795. The vulnerability affects Tomcat 10.1.0-M1 through 10.1.13, and was fixed in 10.1.14 onwards. The upstream Apache Tomcat fix (commit 30f8063d7a by Mark Thomas, dated Oct 5, 2023) was already present in the 10.1.33 release when TuxCare onboarded it. All four affected files (Request.java, ApplicationHttpRequest.java, B2CConverter.java, C2B...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-42795"
      },
      "impact_statement": "not_affected \u2014 Target version 10.1.33 is NOT affected by CVE-2023-42795. The vulnerability affects Tomcat 10.1.0-M1 through 10.1.13, and was fixed in 10.1.14 onwards. The upstream Apache Tomcat fix (commit 30f8063d7a by Mark Thomas, dated Oct 5, 2023) was already present in the 10.1.33 release when TuxCare onboarded it. All four affected files (Request.java, ApplicationHttpRequest.java, B2CConverter.java, C2B..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      },
      "action_statement": "Vulnerability CVE-2023-44487 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T19:11:13.689447+00:00",
      "status_notes": "Vulnerability CVE-2023-45648 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper. not_affected \u2014 CVE-2023-45648 is NOT present in Tomcat 10.1.33. The vulnerability required improper parsing of HTTP trailer headers that could lead to request smuggling. The upstream Apache Tomcat project fixed this in October 2023 and subsequently refactored the code in April 2024 to use a centralized HttpHeaderParser class. Version 10.1.33, released November 2024, shipped with the fix already present. The r...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-45648"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-45648 is NOT present in Tomcat 10.1.33. The vulnerability required improper parsing of HTTP trailer headers that could lead to request smuggling. The upstream Apache Tomcat project fixed this in October 2023 and subsequently refactored the code in April 2024 to use a centralized HttpHeaderParser class. Version 10.1.33, released November 2024, shipped with the fix already present. The r..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:14:49.853815+00:00",
      "status_notes": "Vulnerability CVE-2023-46589 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2023-46589"
      },
      "action_statement": "Vulnerability CVE-2023-46589 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2024-21733 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2024-21733"
      },
      "action_statement": "Vulnerability CVE-2024-21733 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2024-24549 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper. Target version 10.1.33 is not affected. The upstream Apache Tomcat fix for CVE-2024-24549 is already present in this version. The fix moves HTTP/2 header validation from after all frames are processed to after each individual HEADERS/CONTINUATION frame, preventing attackers from forcing the server to buffer excessive header data before limits are checked. The fix was authored by upstream (Mark Thomas, markt@apache.org) on Jan 25, 2024 and was included in Apache Tomcat 10.1.19+. TuxCare onboarded upstream 10.1.33 which already contained this fix.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-24549"
      },
      "impact_statement": "Target version 10.1.33 is not affected. The upstream Apache Tomcat fix for CVE-2024-24549 is already present in this version. The fix moves HTTP/2 header validation from after all frames are processed to after each individual HEADERS/CONTINUATION frame, preventing attackers from forcing the server to buffer excessive header data before limits are checked. The fix was authored by upstream (Mark Thomas, markt@apache.org) on Jan 25, 2024 and was included in Apache Tomcat 10.1.19+. TuxCare onboarded upstream 10.1.33 which already contained this fix."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2024-34750 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2024-34750"
      },
      "action_statement": "Vulnerability CVE-2024-34750 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2024-38286 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2024-38286"
      },
      "action_statement": "Vulnerability CVE-2024-38286 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2024-50379 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2024-50379"
      },
      "action_statement": "Vulnerability CVE-2024-50379 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2024-56337 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2024-56337"
      },
      "action_statement": "Vulnerability CVE-2024-56337 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T15:44:53.815373+00:00",
      "status_notes": "Vulnerability CVE-2025-24813 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2025-24813"
      },
      "action_statement": "Vulnerability CVE-2025-24813 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2025-31650 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-31650"
      },
      "action_statement": "Vulnerability CVE-2025-31650 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T15:44:53.815373+00:00",
      "status_notes": "Vulnerability CVE-2025-31651 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2025-31651"
      },
      "action_statement": "Vulnerability CVE-2025-31651 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:47:00.125685+00:00",
      "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-46701"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2025-48988 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-48988"
      },
      "action_statement": "Vulnerability CVE-2025-48988 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:47:00.125685+00:00",
      "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-48989"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2025-49124 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-49124"
      },
      "action_statement": "Vulnerability CVE-2025-49124 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T15:44:53.815373+00:00",
      "status_notes": "Vulnerability CVE-2025-49125 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2025-49125"
      },
      "action_statement": "Vulnerability CVE-2025-49125 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:14:49.853815+00:00",
      "status_notes": "Vulnerability CVE-2025-52434 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-52434"
      },
      "action_statement": "Vulnerability CVE-2025-52434 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:47:00.125685+00:00",
      "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-52520"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:47:00.125685+00:00",
      "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-53506"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-55668"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2025-55752 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-55752"
      },
      "action_statement": "Vulnerability CVE-2025-55752 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-55754"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-61795"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2025-66614 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2025-66614"
      },
      "action_statement": "Vulnerability CVE-2025-66614 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2026-24734 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-24734"
      },
      "action_statement": "Vulnerability CVE-2026-24734 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2026-24880 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-24880"
      },
      "action_statement": "Vulnerability CVE-2026-24880 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-25854"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2026-34483 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-34483"
      },
      "action_statement": "Vulnerability CVE-2026-34483 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-34487 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-34487"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-41284 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-41284"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-41293 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-41293"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-42498 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-42498"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-43512 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-43512"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2026-43513 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-43513"
      },
      "action_statement": "Vulnerability CVE-2026-43513 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:46:51.248735+00:00",
      "status_notes": "Vulnerability CVE-2026-43514 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-43514"
      },
      "action_statement": "Vulnerability CVE-2026-43514 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T15:44:53.815373+00:00",
      "status_notes": "Vulnerability CVE-2026-43515 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-43515"
      },
      "action_statement": "Vulnerability CVE-2026-43515 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-65182 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-65182"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T15:44:53.815373+00:00",
      "status_notes": "Vulnerability CVE-2026-65905 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-65905"
      },
      "action_statement": "Vulnerability CVE-2026-65905 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper, and is fixed in 10.1.33-tuxcare.2."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@10.1.33-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-22T10:48:00.134099+00:00",
      "status_notes": "Vulnerability CVE-2026-68525 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-jasper.",
      "vulnerability": {
        "name": "CVE-2026-68525"
      }
    }
  ]
}