{
  "@id": "urn:uuid:129de135-1635-48e0-a6ce-83924e169880",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 19,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T15:44:00.110412+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:37:14.382670+00:00",
      "status_notes": "Vulnerability CVE-2017-12615 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2017-12615"
      },
      "action_statement": "Vulnerability CVE-2017-12615 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T23:28:44.006786+00:00",
      "status_notes": "Vulnerability CVE-2017-12617 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2017-12617"
      },
      "action_statement": "Vulnerability CVE-2017-12617 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2017-5648 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2017-5648"
      },
      "action_statement": "Vulnerability CVE-2017-5648 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2018-11784 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2018-11784"
      },
      "action_statement": "Vulnerability CVE-2018-11784 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2018-1304 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2018-1304"
      },
      "action_statement": "Vulnerability CVE-2018-1304 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2018-1305 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2018-1305"
      },
      "action_statement": "Vulnerability CVE-2018-1305 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2018-1336 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2018-1336"
      },
      "action_statement": "Vulnerability CVE-2018-1336 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2018-8014 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2018-8014"
      },
      "action_statement": "Vulnerability CVE-2018-8014 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2018-8034 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2018-8034"
      },
      "action_statement": "Vulnerability CVE-2018-8034 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2018-8037 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2018-8037"
      },
      "action_statement": "Vulnerability CVE-2018-8037 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2019-0199 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2019-0199"
      },
      "action_statement": "Vulnerability CVE-2019-0199 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2019-0221 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2019-0221"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2019-0232 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2019-0232"
      },
      "action_statement": "Vulnerability CVE-2019-0232 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2019-10072 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2019-10072"
      },
      "action_statement": "Vulnerability CVE-2019-10072 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2019-12418 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2019-12418"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2019-17563 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2019-17563"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2020-11996 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2020-11996"
      },
      "action_statement": "Vulnerability CVE-2020-11996 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2020-13935 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2020-13935"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2020-1935 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2020-1935"
      },
      "action_statement": "Vulnerability CVE-2020-1935 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2020-1938 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2020-1938"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2020-9484 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2020-9484"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2021-24122 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2021-24122"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2021-25122 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2021-25122"
      },
      "action_statement": "Vulnerability CVE-2021-25122 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2021-25329 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2021-25329"
      },
      "action_statement": "Vulnerability CVE-2021-25329 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2022-42252 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2022-42252"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2022-45143 does not affect version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket. Apache Tomcat 9.0.13 is not affected by CVE-2022-45143. The vulnerability concerns JsonErrorReportValve, a component that was introduced in Tomcat 9.0.40. Version 9.0.13 predates this introduction and does not contain the vulnerable class or any JSON error reporting functionality.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2022-45143"
      },
      "impact_statement": "Apache Tomcat 9.0.13 is not affected by CVE-2022-45143. The vulnerability concerns JsonErrorReportValve, a component that was introduced in Tomcat 9.0.40. Version 9.0.13 predates this introduction and does not contain the vulnerable class or any JSON error reporting functionality."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2023-24998 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2023-24998"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2023-41080 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2023-41080"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2023-42795 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2023-42795"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2023-45648 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2023-45648"
      },
      "action_statement": "Vulnerability CVE-2023-45648 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2023-46589 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2023-46589"
      },
      "action_statement": "Vulnerability CVE-2023-46589 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2024-21733 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2024-21733"
      },
      "action_statement": "Vulnerability CVE-2024-21733 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2024-23672 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2024-23672"
      },
      "action_statement": "Vulnerability CVE-2024-23672 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2024-24549 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2024-24549"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2024-34750 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2024-34750"
      },
      "action_statement": "Vulnerability CVE-2024-34750 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2024-38286 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2024-38286"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2024-50379 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2024-50379"
      },
      "action_statement": "Vulnerability CVE-2024-50379 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2024-56337 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2024-56337"
      },
      "action_statement": "Vulnerability CVE-2024-56337 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-24813 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-24813"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-31650 does not affect version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket. Apache Tomcat 9.0.13 is not affected by CVE-2025-31650. The vulnerability requires RFC 9218 Extensible Priorities implementation (PRIORITY_UPDATE frames and Priority header parsing via Priority.parsePriority() method), which does not exist in version 9.0.13. The target version only implements the original HTTP/2 PRIORITY frame mechanism (RFC 7540, frame type 2), which is unrelated to this CVE. Exhaustive code analysis confirmed zero RFC 9218-related code present: no PRIORITY_UPDATE frame type, no readPriorityUpdateFrame() method, no Priority.parsePriority() parser class, and no priority header case in Stream.emitHeader(). The CVE's affected version range starts at 9.0.76, where RFC 9218 support was introduced; version 9.0.13 predates this feature.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2025-31650"
      },
      "impact_statement": "Apache Tomcat 9.0.13 is not affected by CVE-2025-31650. The vulnerability requires RFC 9218 Extensible Priorities implementation (PRIORITY_UPDATE frames and Priority header parsing via Priority.parsePriority() method), which does not exist in version 9.0.13. The target version only implements the original HTTP/2 PRIORITY frame mechanism (RFC 7540, frame type 2), which is unrelated to this CVE. Exhaustive code analysis confirmed zero RFC 9218-related code present: no PRIORITY_UPDATE frame type, no readPriorityUpdateFrame() method, no Priority.parsePriority() parser class, and no priority header case in Stream.emitHeader(). The CVE's affected version range starts at 9.0.76, where RFC 9218 support was introduced; version 9.0.13 predates this feature."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-31651 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-31651"
      },
      "action_statement": "Vulnerability CVE-2025-31651 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-46701"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-48988 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-48988"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-48989"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2025-49124 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-49124"
      },
      "action_statement": "Vulnerability CVE-2025-49124 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-49125 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-49125"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-52434 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-52434"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-52520"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-53506"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-55668"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-55752 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-55752"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T18:11:01.360398+00:00",
      "status_notes": "Vulnerability CVE-2025-55754 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-55754"
      },
      "action_statement": "Vulnerability CVE-2025-55754 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-61795"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2025-66614 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2025-66614"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-30T10:58:34.392596+00:00",
      "status_notes": "Vulnerability CVE-2026-24734 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-24734"
      },
      "action_statement": "Vulnerability CVE-2026-24734 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-24880 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-24880"
      },
      "action_statement": "Vulnerability CVE-2026-24880 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-25854"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2026-34483 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-34483"
      },
      "action_statement": "Vulnerability CVE-2026-34483 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-34487 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-34487"
      },
      "action_statement": "Vulnerability CVE-2026-34487 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-41284 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-41284"
      },
      "action_statement": "Vulnerability CVE-2026-41284 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-41293 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-41293"
      },
      "action_statement": "Vulnerability CVE-2026-41293 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-42498 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-42498"
      },
      "action_statement": "Vulnerability CVE-2026-42498 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-43512 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-43512"
      },
      "action_statement": "Vulnerability CVE-2026-43512 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-43513 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-43513"
      },
      "action_statement": "Vulnerability CVE-2026-43513 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-43514 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-43514"
      },
      "action_statement": "Vulnerability CVE-2026-43514 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-43515 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-43515"
      },
      "action_statement": "Vulnerability CVE-2026-43515 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-65182 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-65182"
      },
      "action_statement": "Vulnerability CVE-2026-65182 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-65905 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-65905"
      },
      "action_statement": "Vulnerability CVE-2026-65905 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability CVE-2026-68525 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket.",
      "vulnerability": {
        "name": "CVE-2026-68525"
      },
      "action_statement": "Vulnerability CVE-2026-68525 affects version 9.0.13-tuxcare.3 of org.apache.tomcat.embed:tomcat-embed-websocket."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.13-tuxcare.3"
          }
        }
      ],
      "timestamp": "2026-10-27T20:31:21.529966+00:00",
      "status_notes": "Vulnerability GHSA-r53m-pfr5-7v87 is a false positive for org.apache.tomcat.embed:tomcat-embed-websocket 9.0.13-tuxcare.3.",
      "vulnerability": {
        "name": "GHSA-r53m-pfr5-7v87"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    }
  ]
}